The wallet attestation is a signed attestation that can be used in the client authentication mechanisms

[peppelinux]

Technically the wallet attestation is a signed attestation that can be used in the client authentication mechanisms, as outlined in my previous comment.

if agreed, I can therefore purpose a rewording also here

Originally posted by @peppelinux in https://github.com/openid/OpenID4VCI/pull/408#discussion_r1874985300

[Sakurann]

not sure i remember the context, but wallet attestation is indeed already being used for client authentication at the token and PAR endpoints, right?

[jogu]

Even after reading the context, I'm not sure what is suggested to change here and why?

Wallet Attestation as defined in the VCI spec is specifically for client authentication. It's an extension of an OAuth specification for client authentication. It would I could actually be actively dangerous to suggest that a Wallet Attestation (as defined in the VCI spec currently) is used for anything other than client authentication.

I'd suggest we close unless anyone (@peppelinux ?) can clarify?