<div dir="ltr"><div><div>Hello all, </div><div><br></div><div>Please find minutes below:</div><div>---------------------------</div><div><p class="MsoNormal" style="margin:0cm;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:Garamond,serif"> </span></p><p class="MsoNormal" style="margin:0cm;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:Garamond,serif">Events:</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">ETF Madrid happening next week</span></p><p class="MsoNormal" style="margin:0cm;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:Garamond,serif">VCI interoperability updates from Gail Hodges</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">The event happened on 21 July 2025</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">VCI tested draft 16 as interop number 3 – Preliminary results whoe 63 passed tests, 32 known identifiable issues, and 1 new issue</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Gail also asked members to look out for email for  preliminary results sent out on previous day, another update would come on 25 July 2025</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Security Analysis done by for openVP4VCI 1.0</span></p><p style="margin:0cm 0cm 0cm 72pt;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span style="font-family:Garamond,serif">The reports needs to sent to the working group for review and discussion</span></p><p style="margin:0cm 0cm 0cm 72pt;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span style="font-family:Garamond,serif">Gail asked members to raise any concerns in the report - this assessment did not cover DC API</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">The goal of this analysis is to study the security of the OpenID for Verifiable Presentations (OID4VP) [OID4VP] specification when used over the Digital Credentials API (DC API) [2]. More specifically, on a very high level, we aim to prove that using OID4VP over the DC API fulfills a basic “claims unforgeability” property, i.e., an attacker cannot convince an honest verifier to have the properties/claims asserted by an honest issuer for an honest user in a credential issued to an honest wallet.- Issues in PRs</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">- The underlying WIM (Web Infrastructure Model) methodology has been successfully used on various Web protocols in the past, uncovering previously unknown attacks and often resulting in new standards to mitigate them. Many of these protocols are at least somewhat related to OIDF standards, for example: OAuth 2.0 [5, 11], Open ID Connect [5, 12], OpenID FAPI 1.0 [6], OpenID FAPI 2.0 [15], and Mozilla’s BrowserID [8, 9]. One of the key strengths of the WIM methodology lies in identifying errors on the protocol specification level – i.e., a WIM analysis usually assumes that a protocol specification has been implemented correctly w.r.t. the specification(s) and excludes attack vectors like Cross-Site Scripting or vulnerabilities in cryptographic primitives and their implementation (e.g., side-channel attacks), as such attacks are usually outside the scope of protocol specifications.    -</span></p><p class="MsoNormal" style="margin:0cm;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:Garamond,serif">Calls earlier in the day:</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Group received some comments during review, as a reminder the group cannot take comments in the review period</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Some PRs open only editorial.</span></p><p class="MsoNormal" style="margin:0cm;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:Garamond,serif">Reviews done today : OpenID4VCI</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">PR#572 : Reviewed, Lenah to do PR review</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Issue #211 : To be reviewed later</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Issue #178 : comments made unblocking issue 160, Oliver Terbu to review</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Issue 160 : comments and Pr t be done by Christian ( needs someone who understands trust lists very well)</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Issue #199 : comment added and moved to 1.0, Continue working but HPKE needs working with most likely PQE</span></p><p style="margin:0cm 0cm 0cm 72pt;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span style="font-family:Garamond,serif">HPKE and apu/apv values - suggestion given: tell ISO that this working group will not be working on it in v1.0.</span></p><p style="margin:0cm 0cm 0cm 72pt;font-size:12pt;font-family:Calibri,sans-serif"><span style="font-family:"Courier New"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">   </span></span><span style="font-family:Garamond,serif">Co-Chair to check on on tracker for ISO meetings and come back to WG</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">issue #15 Closed, POST mode was added is v1.0</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">issue #179 Discussed and pending close tagged</span></p><p style="margin:0cm 0cm 0cm 36pt;font-size:12pt;font-family:Calibri,sans-serif">-<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">       </span><span style="font-family:Garamond,serif">Issue #88 - No wide support to mandate openid foundation. current direction is to start with x509 hash</span></p></div><font color="#888888"><br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div><b>Lenah </b></div><div><br></div></div></div></div></div></div></div></font></div></div>