Joseph Heenan comments

Results 520 comments of


                                            Joseph Heenan

Not all credentials are high assurance, should HAIP support those other cases?

> isn't this resolved by [#210](https://github.com/openid/OpenID4VC-HAIP/pull/210) ? Not entirely, e.g. pre-auth code flow is fine in some low assurance use cases but is currently not permitted in HAIP, and I'm...

Allow wallets to proceed with signed requests when the signature verification fails/can't be performed but the user wants to proceed anyway?

I think this might've been addressed by https://github.com/openid/OpenID4VP/issues/395 ?

Limit options supported for the format and resolution method for image based assets in credential issuer metadata

> suggestion is to allow data URIs and remote https urls, limit the content types to svg and png > WG discussion: this is an expectation only when the wallet...

signed issuer metadata

Just for clarity, I believe Paul is talking about `signed_metadata` in the credential issuer metadata (which is what this MR suggests recommending), and I believe Mike is talking about `signed_metadata`...

signed issuer metadata

Discussed on today's WG call - Paul to review then we plan to merge.

Why HAIP implies that there are temporal validation rules for `iat` when it has none, and at the same time does not mention `nbf` at all?

closing as https://github.com/openid/OpenID4VC-HAIP/pull/165 addressed this and is now merged

Why HAIP implies that there are temporal validation rules for `iat` when it has none, and at the same time does not mention `nbf` at all?

#275 addressed this again, closing

Change mandating ECDH-ES to mandating some version of HPKE

If we can do this before HAIP 1.0 that would be ideal and help solve some ISO worries. Is there a proposal for what the HPKE detached info would contain?...

Define `SessionTranscript` and JARM for `mso_mdoc` format for vanilla OID4VP

session transcript happened in https://github.com/openid/OpenID4VP/pull/610 - apu/apv the WG decided not to do in https://github.com/openid/OpenID4VP/pull/628#issuecomment-2945215753 closing as we have a separate ticket for the non-DC API mdoc profile.

Normative version inconsistency for SD-JWT VC in 1.0 final

Thanks @nklomp - an annoying oversight but luckily I don't think there are any important normative changes between draft 9 and draft 10 - but we can definitely clean this...