<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi all,</p>
<p>here are the notes for today's meeting:</p>
<p># Attendees<br>
<br>
- Paul Bastian<br>
- Torsten Lodderstedt<br>
- Kristina Yasuda<br>
- Joseph Heenan<br>
- Gareth Oliver<br>
- Bjorn Helm<br>
- Christian Bormann<br>
- Daniel Fett<br>
- David Waite<br>
- Oliver Terbu<br>
- Hicham Lozi<br>
- Lenah Chacha<br>
- Leonardo Maldonado<br>
- Martijn<br>
- Peter Sorotokin<br>
- Rajvardhan Deshmukh<br>
- Robert (Mastercard)<br>
- Ryan Galluzo<br>
- Andres Olave<br>
- Rene Leveille<br>
<br>
# Code of conduct / Antitrust policy / IPR policy<br>
<br>
-
<a class="moz-txt-link-freetext" href="https://openid.net/wp-content/uploads/2025/06/OIDF_Groups-Activities-Events-Note-Well_Final_2025-06-12.pdf">https://openid.net/wp-content/uploads/2025/06/OIDF_Groups-Activities-Events-Note-Well_Final_2025-06-12.pdf</a><br>
<br>
# OpenID4VCI<br>
<br>
- voting announcement goes out next Thursday<br>
- final draft (-17) for VCI should be ready by next Tuesday<br>
<br>
## OpenID4VCI Issue#595<br>
<br>
- there is a mixup attack for the new Interactive Authorization
Endpoint<br>
- malicious issuer may link IAE from valid endpoint<br>
- add iss to response from IAE response<br>
- Daniel to propose a PR<br>
- Martjin asks how the iss value is protected/encrypted<br>
<br>
## Add statement that clarifies the use of scope and
authorization_details #596<br>
<br>
- adding latest suggestions<br>
<br>
## Merge Deferred Endpoint #583<br>
<br>
- reviews needed<br>
<br>
## Ability to continue after redirect_to_web #589<br>
<br>
- enhance existing IAE flow to allow bounce back between
collecting data in wallet and in the browser multiple times<br>
- current VCI text does not allow this<br>
- Kristina asks for usecases (other than MATTRs)<br>
- added complexity, may be added in 1.1 as IAE was already added
late in the process<br>
<br>
# HAIP <br>
<br>
- those labeled "needs-review" are priority for review<br>
<br>
## Modified Wording for Key Attestation #217<br>
<br>
- new wording is unclear for Martjin , he assumes wallets without
backend may be excluded<br>
- Gareth with new suggestion<br>
- Paul arguing that wallet backend for HAIP is very realistic with
today's tech<br>
- Martijn questioning whether wallet backend for key attestation
is a good idea<br>
- Torsten und Paul point out that it's impossible today with iOS,
and there are many people that want Remote HSM for key storage<br>
- Gareth asking whether to remove any default<br>
- adding privacy consideration on requirement for wallet backend<br>
- discussion about MUST or SHOULD for support of Annex D key
attestation<br>
-> Torsten suggesting SHOULD is enough<br>
<br>
## What does high-assurance mean? #231<br>
<br>
- more reviews needed<br>
<br>
## clarify text around intent_to_retain <br>
<br>
- not mandatory in OpenID4VP<br>
- discussion around making it mandatory in HAIP<br>
- Paul points out it's confusing to users because on mdoc
information is shown that is missing in SD-JWT cases<br>
- difficulties due to EUDIW and mDL having different requirements<br>
- option 1: not make it mandatory, try to fix it in 1.1 for all
credentials, may result in new discussion with ISO wg<br>
- option 2: keep it mandatory<br>
- Kristina will check previous communication with ISO wg<br>
</p>
<p>Best, Paul</p>
<div class="moz-cite-prefix">On 8/5/25 15:35, Joseph Heenan via
Openid-specs-digital-credentials-protocols wrote:<br>
</div>
<blockquote type="cite"
cite="mid:0B4737C4-C1A7-4B0F-A249-6752F7E0C627@authlete.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div
style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<meta http-equiv="content-type"
content="text/html; charset=UTF-8">
<div
style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<meta http-equiv="content-type"
content="text/html; charset=UTF-8">
<div
style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<meta http-equiv="content-type"
content="text/html; charset=UTF-8">
<div
style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<meta http-equiv="content-type"
content="text/html; charset=UTF-8">
<div
style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<div>Hi all</div>
<div><br>
</div>
<div>Proposed agenda for the usual America friendly call
later today - 8pm London / 9pm CET / 3pm Eastern /
midday Pacific on the usual
zoom, <a class="moz-txt-link-freetext" href="https://zoom.us/j/94085567252?pwd=cHNFMExFalhlM2MrOFhoN3J6eDRuZz09">https://zoom.us/j/94085567252?pwd=cHNFMExFalhlM2MrOFhoN3J6eDRuZz09</a></div>
<div><br>
</div>
<div>
<div>
<ol class="MailOutline">
<li>Code of conduct / Antitrust policy / IPR
policy: <a
href="https://openid.net/wp-content/uploads/2025/06/OIDF_Groups-Activities-Events-Note-Well_Final_2025-06-12.pdf"
moz-do-not-send="true"
class="moz-txt-link-freetext">https://openid.net/wp-content/uploads/2025/06/OIDF_Groups-Activities-Events-Note-Well_Final_2025-06-12.pdf</a></li>
<li>Note-taking</li>
<li>Introductions</li>
<li>Agenda bashing</li>
<li>Events</li>
<li>General updates </li>
<li>OID4VCI 1.0,:</li>
<ol class="MailOutline">
<li>Please review some of the editorial PRs: <a
href="https://github.com/openid/OpenID4VCI/pulls" moz-do-not-send="true"
class="moz-txt-link-freetext">https://github.com/openid/OpenID4VCI/pulls</a></li>
<li>We want to publish a new version on/by Tue
12th Aug, prior to vote announcement going out
on Thursday 14th & voting starting on 29th
Aug</li>
</ol>
<li>HAIP PRs</li>
<ol class="MailOutline">
<li><a
href="https://github.com/openid/OpenID4VC-HAIP/pulls"
moz-do-not-send="true"
class="moz-txt-link-freetext">https://github.com/openid/OpenID4VC-HAIP/pulls</a></li>
<li>In particular we have a number that are
ready to go and just need one or two more
reviews: <a
href="https://github.com/openid/OpenID4VC-HAIP/pulls?q=is%3Apr+is%3Aopen+label%3Aneeds-reviews"
moz-do-not-send="true"
class="moz-txt-link-freetext">https://github.com/openid/OpenID4VC-HAIP/pulls?q=is%3Apr+is%3Aopen+label%3Aneeds-reviews</a></li>
</ol>
<li>HAIP open issues for 1.0:</li>
<ol class="MailOutline">
<li><a
href="https://github.com/openid/OpenID4VC-HAIP/issues?q=is%3Aissue%20state%3Aopen%20-label%3Aafter-wglc%20-label%3Ahas-PR%20-label%3Aready-for-PR%20milestone%3A%221.0%20Final%22"
moz-do-not-send="true"
class="moz-txt-link-freetext">https://github.com/openid/OpenID4VC-HAIP/issues?q=is%3Aissue%20state%3Aopen%20-label%3Aafter-wglc%20-label%3Ahas-PR%20-label%3Aready-for-PR%20milestone%3A%221.0%20Final%22</a></li>
</ol>
</ol>
</div>
</div>
<div>
<div>
<div><br>
</div>
</div>
<div>If anyone has any specific topics they’d like to
cover please reply to this email or ask at the start
of the call.</div>
<div><br>
</div>
</div>
<div>Thanks</div>
<div><br>
</div>
<div>Joseph</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
</blockquote>
</body>
</html>