[OAUTH-WG] Call for WG Feedback on DID Resolution in SD-JWT VC

Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com> Fri, 12 September 2025 16:53 UTC

Return-Path: <rifaat.s.ietf@gmail.com>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 8F02C61B593A for <oauth@mail2.ietf.org>; Fri, 12 Sep 2025 09:53:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -0.199
X-Spam-Level:
X-Spam-Status: No, score=-0.199 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IvZD3UIgzd8u for <oauth@mail2.ietf.org>; Fri, 12 Sep 2025 09:53:44 -0700 (PDT)
Received: from mail-lf1-x130.google.com (mail-lf1-x130.google.com [IPv6:2a00:1450:4864:20::130]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 48C1761B592C for <oauth@ietf.org>; Fri, 12 Sep 2025 09:53:44 -0700 (PDT)
Received: by mail-lf1-x130.google.com with SMTP id 2adb3069b0e04-56afe77bc1eso2334733e87.0 for <oauth@ietf.org>; Fri, 12 Sep 2025 09:53:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1757696023; x=1758300823; darn=ietf.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=fPkuNiwoEObPEFRuNkn5ALg6Lug822IFOQEc2wU663I=; b=a34CLNqB0/4ZOfPUy+0RvTvH7Lz8TsbJlmk88j1xTWL4FEmRmGYvA0fSIpmGUf8waM jNSlS3VRf+9lG5qdzs+rWyScWQoikq2krkXvhtn85dCzhGQRZIYHexDBPMfOgftPGLHB Rk08RIJEnGXiYcsScqgz0pvxQy9XmhzOgKkvK1KR94U5yN2sjg0oCg2KmbPijCUGybdk EGE08IhEo4Z2R5HEAdqSyHmRi8MLiaFCPqotLxT4X+aJjAeDG5my3CFjtTTg2QAHEc7l J5dxQpYrjc7Jw9krgfytDmQb1VMFU/qq6YKfcV1x9plTcWlcm6iA9FBz2xEvNhXHv5KB XdSw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1757696023; x=1758300823; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=fPkuNiwoEObPEFRuNkn5ALg6Lug822IFOQEc2wU663I=; b=iDce83n0v5X14z1WjF/t74B5Oa/C1699RGYbvkba+sVYB3D2sySmNodqYoYJayH/I9 jzxQSP8mcR8xuVUrx0fBt4QA8u8gYJTvZWWUjtqkXpUrFPokGzFvbETFBlqk+wRFsAQx DfRdMNdDQdybrBm9egMfAxyvjH7cQ2Mz6bhU8k1Et/Dd6OdCnqW0GBsXXx24rDc1SeUs HP3fsrx3rVF+Bf/R9Ias8wmI3CVF7beUl8xhX1eTZSwovztkWWqUZAt5zt76xe6bz6my g2T1pIR9wm8wSTC0E9lz9tGoTp0qOrCuf8QvtAiiu9YdV9uPok+1tQAVxoCn9EDpjYn6 V2Zg==
X-Gm-Message-State: AOJu0Yx9cer3jXotY/Z/4fmlOUdLPDJoO11NYYuUh54wjSEHzdNxmUR3 Kvs4tRBx5rCBbuqm8vrTvTqJd6Nn2LGv+z0EFBE22/zcgVeR2zW5gtIFj+J3pEmRXgxjKiQb/Nv frWcIZYKuhP4Xj+xvEFUIJQBfcDOoMYszcv4V
X-Gm-Gg: ASbGnctf8Yw2Y8MD2CueOlgAQBNmAjBTfKepb6zr09yowVP26mc5L0ynyYva2LlrYH8 I7BmMn5LL3zDaRP7v/wkdrVQ8OdZccRPciOx5JYOqP7J1bql1Vnlac1NRiBVWlB8u4wXZXJbuVh jaP+NDHWnk/7A2FBM3lLqb4+3IWhF/oqJFi8Hdq77QAWKX9CMVtHqdZDDXcS+gNl7/u1HswNZwL cihddS5
X-Google-Smtp-Source: AGHT+IHe8c3GfbR7Th7I0JEZHgBL5nfy0r/GaklIs9Ix4vTyqQVWGziKKEP8UUJV9Dld4DGzYfAehrQe2dm3n6oYAJ8=
X-Received: by 2002:a05:6512:34d9:b0:55f:71d2:e5b6 with SMTP id 2adb3069b0e04-5704f5b136emr1226937e87.30.1757696022428; Fri, 12 Sep 2025 09:53:42 -0700 (PDT)
MIME-Version: 1.0
From: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Date: Fri, 12 Sep 2025 12:53:31 -0400
X-Gm-Features: AS18NWAIhC9Cn0ekKrzszInOEmEaM-hGS8N0jA1pML8ePZ4Vvkd5GTCAaU6HQp4
Message-ID: <CADNypP88y_pt=Xq95j_KfFF6PXJmdQm93A53E_xLhUZpkqYNZQ@mail.gmail.com>
To: oauth <oauth@ietf.org>
Content-Type: multipart/alternative; boundary="0000000000000a3f35063e9d7f9b"
Message-ID-Hash: CGJG25XMBLEPRO3NOU3LOIUY4JA4L4OA
X-Message-ID-Hash: CGJG25XMBLEPRO3NOU3LOIUY4JA4L4OA
X-MailFrom: rifaat.s.ietf@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Call for WG Feedback on DID Resolution in SD-JWT VC
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/8JaNe4pcd0HFObWy2Eygyh4sFCQ>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

All,

This is an official call for getting the WG’s opinion on the last open
issue in draft-ietf-oauth-sd-jwt-vc-10 concerning the *removal* of the *DID
Document Resolution*.

In an early version of the SD-JWT VC document, we had three Issuer-signed
JWT Verification Key Validation techniques:

   1. JWT VC Issuer Metadata
   2. X509 based certificates
   3. DID Document Resolution


Do you agree with the removal of the DID Document Resolution option from
the SD JWT VC specification?

Please note that this *does not *prevent future *extensions*. Interested
parties are free to define and publish an extension that adds DID Document
Resolution support, if desired.

Please, reply on the *mailing list *with your preference by *October 3rd*.

Regards,
 Rifaat & Hannes