OpenID4VCI
OpenID4VCI copied to clipboard
Credential Response encryption not specified for the Deferred Credential Endpoint
Credential Response encryption is not specified for Deferred Credential Endpoint.
It also might be nice to be able to provide a new jwk in the deferred credential request to perform this encryption (rather than relying on the one provided originally) as if this takes a long time maintaining those keys might be problematic.
makes sense. just adding a sentence that encryption is the same in deferred and normal credential endpoint make sense?
let's keep Credential Request/Response similar to Deferred Credential Request/Response to keep possibility to merge them
WG discussion:
- 3 questions:
- response encryption keys included in deferred credential request? optional or mandatory? mandatory.
- same issuer metadata for the encryption related metadata? YES
- deferred credential request encryption from a consistency perspective? yes if ...
- ideal design goal is for credential endpoint and deferred credential endpoint to be symmetrical
- should be considered in conjunction with #507