<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Helvetica Neue";
panose-1:2 0 5 3 0 0 0 2 0 4;}
@font-face
{font-family:Times;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;
mso-ligatures:none;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-NZ" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"># Attendees</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Kristina</p>
<p class="MsoNormal">- Martijn</p>
<p class="MsoNormal">- Hicham</p>
<p class="MsoNormal">- Ian</p>
<p class="MsoNormal">- Lee</p>
<p class="MsoNormal">- Brian</p>
<p class="MsoNormal">- Danieal</p>
<p class="MsoNormal">- Elizabeth</p>
<p class="MsoNormal">- Mike</p>
<p class="MsoNormal">- Peter</p>
<p class="MsoNormal">- Raj</p>
<p class="MsoNormal">- Rene</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># Events & Announcements</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- OpenID4VCI vote announcement has gone out, URL for this announcement is currently being fixed.</p>
<p class="MsoNormal">- IIW dates have changed back to the 21st of October, DCP WG calls still plan to coincide with this.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># Issues</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>## OpenID4VCI</b></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Martijn raised that issue 605 was merged with some agreed changes missing, either Gareth or Martijn will follow up with an additional PR to address.</p>
<p class="MsoNormal">- Kristina created a new issue to track the required changes.
</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>## HAIP</b></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- 7 open PR's, reviews welcomed</p>
<p class="MsoNormal">- All issues apart of the 1.0 milestone are now tagged as such</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Issue 109, what should we say about ISO mDocs for status management</p>
<p class="MsoNormal"><i>*Lee*</i> Why do we need to say anything?</p>
<p class="MsoNormal"><i>*Kristina*</i> For interoperability</p>
<p class="MsoNormal"><i>*Lee*</i> I think it should be out of scope of HAIP to concretely define this</p>
<p class="MsoNormal"><i>*Martijn*</i> I also don't see why we need any normative language around this for mDocs in HAIP, could we instead point via a non-normative note to rev 2 of ISO 18013-5</p>
<p class="MsoNormal"><i>*Kristina*</i> Im ok with that</p>
<p class="MsoNormal"><i>*Lee*</i> Likewise provided it is non-normative</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Issue 185</p>
<p class="MsoNormal"><i>*Kristina*</i> The suggestion with this is to allow both HTTPs and data URI's but limit the content type to certain image formats such as SVG and PNG</p>
<p class="MsoNormal"><i>*Martijn*</i> Just clarifying that the logo mechanism is not mandatory</p>
<p class="MsoNormal"><i>*Kristina*</i> Thats correct</p>
<p class="MsoNormal"><i>*Lee*</i> I think in the event this mechanism is used it makes sense to constrain the image formats supported.</p>
<p class="MsoNormal"><i>*Lee*</i> Should we do this in VCI instead of HAIP</p>
<p class="MsoNormal"><i>*Kristina*</i> Could be too restrictive, if we want MUST lets do it in HAIP</p>
<p class="MsoNormal"><i>*Tobias*</i> I'll review text in both HAIP and VCI in relation to this</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Issue 227</p>
<p class="MsoNormal"><i>*Martijn*</i> It feels a bit strange to me to mandate a feature pre-auth that may come with additional security considerations</p>
<p class="MsoNormal"><i>*Paul*</i> I feel somewhat similar</p>
<p class="MsoNormal"><i>*Lee*</i> Pre-auth appears to be a pre-dominant pattern that many usecases require so if pre-auth isn't suitable in its current form we need to adapt the mechanism</p>
<p class="MsoNormal"><i>*Tobias*</i> Lots of useful usecases are addressed with this I think we could constrain the usage to say using the DC API for transmission</p>
<p class="MsoNormal"><i>*Kristina*</i> Lets put it into v1.1 when a DC API based mechanism for pre-auth should be defined.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Issue 104</p>
<p class="MsoNormal"><i>*Kristina*</i> Any issues with mandating this based on the findings from FAPI</p>
<p class="MsoNormal"><i>*Brian*</i> I don't believe there is much benefit in requiring it</p>
<p class="MsoNormal"><b>**Lots of discussion, review recording**</b></p>
<p class="MsoNormal"><i>*Kristina*</i> I will document and we can discuss with Joseph when he is back</p>
<p class="MsoNormal"><i>*Paul*</i> Worth considering if we mandated this then we may not need PKCE</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Issue 98</p>
<p class="MsoNormal"><i>*Tobias*</i> With the current state of DC API this basically makes cross device flows impossible</p>
<p class="MsoNormal"><i>*Gareth*</i> Understand this complication but the security considerations are real for cross device flows I don't think we should allow cross device using ordinary OpenID4VP</p>
<p class="MsoNormal"><i>*Paul*</i> Agree with Gareth</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Issue 236</p>
<p class="MsoNormal">No objection to suggested change, Oliver is going to do a PR</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">- Issue 237</p>
<p class="MsoNormal">Briefly discussed, please review proposed changes in the issue</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks,</p>
<div>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="125" valign="top" style="width:93.75pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://mattr.global/"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#0FADE1;border:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="125" height="125" style="width:1.302in;height:1.302in" id="Picture_x0020_5" src="cid:image001.png@01DC11AE.0D9BFAA0" alt="MATTR website"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="16" style="width:12.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:black;mso-ligatures:none;mso-fareast-language:EN-GB"> <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><b><span style="font-size:9.0pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">Tobias Looker</span></b><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">MATTR<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:9.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB">+64 273 780 461<br>
</span><a href="mailto:first.last@mattr.global"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#0563C1;border:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-GB">tobias.looker@mattr.global</span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="padding:9.0pt 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://mattr.global/"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_4" src="cid:image002.png@01DC11AE.0D9BFAA0" alt="MATTR website"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://www.linkedin.com/company/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_3" src="cid:image003.png@01DC11AE.0D9BFAA0" alt="MATTR on LinkedIn"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://twitter.com/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_2" src="cid:image004.png@01DC11AE.0D9BFAA0" alt="MATTR on Twitter"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
<td width="40" style="width:30.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="line-height:12.0pt"><a href="https://github.com/mattrglobal" target="_blank"><span style="font-size:8.5pt;font-family:"Helvetica Neue";color:#333132;border:none windowtext 1.0pt;padding:0cm;mso-ligatures:none;mso-fareast-language:EN-GB;text-decoration:none"><img border="0" width="24" height="40" style="width:.25in;height:.4166in" id="Picture_x0020_1" src="cid:image005.png@01DC11AE.0D9BFAA0" alt="MATTR on Github"></span></a><span style="font-size:8.5pt;font-family:"Helvetica Neue";mso-ligatures:none;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:Times;color:black;mso-ligatures:none;mso-fareast-language:EN-GB"><br>
</span><span style="font-size:6.0pt;font-family:"Helvetica Neue";color:#767676;mso-ligatures:none;mso-fareast-language:EN-GB">This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it – please
contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions
Act 2002.</span></p>
</div>
</div>
</div>
</body>
</html>