Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

signed issuer metadata #176

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

signed issuer metadata #176

wants to merge 4 commits into from

Conversation

c2bo
Copy link
Member

@c2bo c2bo commented Mar 11, 2025

Closes #156

I added the RECOMMENDED part - happy to remove if WG is not comfortable with it.

@@ -118,6 +118,10 @@ Both the Wallet and the Credential Issuer:

Both Wallet initiated and Issuer initiated issuance is supported.

## Issuer Metadata

Support for signed Issuer Metadata to allow for Issuer authentication via the `signed_metadata` parameter in the Issuer Metadata is RECOMMENDED. When required by ecosystem policy, signed Issuer Metadata MUST be supported by both the Wallet and the Issuer. Key resolution to validate the signed Issuer Metadata via the `x5c` header parameter in the JWT MUST be supported for signed Issuer Metadata.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Support for signed Issuer Metadata to allow for Issuer authentication via the `signed_metadata` parameter in the Issuer Metadata is RECOMMENDED. When required by ecosystem policy, signed Issuer Metadata MUST be supported by both the Wallet and the Issuer. Key resolution to validate the signed Issuer Metadata via the `x5c` header parameter in the JWT MUST be supported for signed Issuer Metadata.
To support signed Issuer Metadata to allow for Issuer authentication, it is
RECOMMENDED to use the `signed_metadata` parameter in the Issuer Metadata.
When required by ecosystem policy, signed Issuer Metadata MUST be supported by
both the Wallet and the Issuer. Key resolution to validate the signed Issuer Metadata
MUST be supported using the `x5c` header parameter in the JWT.

I would like to be more explicit.

  • can we please put reference to x5c parameter?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

mandate signed_metadata in VCI as a way to authenticate issuer?
2 participants