<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
</head>
<body>
<div name="messageBodySection">
<div dir="auto">Hi,<br />
<br />
below are the meeting minutes from the working group call on the 4th of September.<br />
<br />
best regards,<br />
Torsten.<br />
<br />
Attendees:<br />
Joseph Heenan<br />
Philip Halsall<br />
Kristina Yasuda<br />
Christina Bormann<br />
Kenichi Nakamura<br />
Hiroyuki Sano<br />
Klaus Roehrle<br />
Martijn Haring<br />
Torsten Lodderstedt<br />
<br />
Events/General Updates</div>
<ul>
<li>IIW: hybrid events on 20th and 24th of Oct</li>
<li>Voting has started for VCI - https://openid.net/foundation/members/polls/376 - please vote </li>
</ul>
<div dir="auto">VCI<br />
WG members are asked to review the following PRs: PR 646, PR 643, PR 642<br />
<br />
HAIP</div>
<ul>
<li>PR 229</li>
<li>PR 252</li>
<li>Issue 243</li>
<ul>
<li>Christian: binding can be achieved independent of the client id scheme by using data from the certificate. Should be decided by the ecosystem.</li>
<li>Martijn: binding can provide some security, but one needs to be careful in terms of consequences. </li>
<li>Kenichi pointed out that the subject of the reader cert and the subject of the TLS cert can be different in mDL case.</li>
<li>Consensus to add this recommendation in a PR, Christian agreed to create the PR</li>
</ul>
<li>Issue 256</li>
<ul>
<li>Torsten/Christian: there are long living </li>
<li>Martijn: expiration also depends on the expiration of the trust chain</li>
<li>Christian: can be coped with using long term validation procedures (oversigning)</li>
</ul>
<li>Issue 249</li>
<ul>
<li>Kristina supports the issue</li>
<li>looking for a volunteer to create the PR</li>
</ul>
<li>Issue 247</li>
<ul>
<li>agreement that requiring HTTPS for iss is not needed</li>
<li>Joseph to draft up change and adding text pointing out trust to the issuer shal be established through the data obtained from x5c header.</li>
</ul>
</ul>
<div dir="auto"><br /></div>
</div>
</body>
</html>