IETF Logo Mail Archive

[OAUTH-WG] Re: Call for WG Feedback on DID Resolution in SD-JWT VC

Tim Cappalli <timcappalli@cloudauth.dev> Fri, 12 September 2025 19:20 UTC

Return-Path: <timcappalli@cloudauth.dev>
X-Original-To: oauth@mail2.ietf.org
Delivered-To: oauth@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id AF1B861CA48F for <oauth@mail2.ietf.org>; Fri, 12 Sep 2025 12:20:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=cloudauth.dev
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QJrXlDIZI3Q2 for <oauth@mail2.ietf.org>; Fri, 12 Sep 2025 12:20:01 -0700 (PDT)
Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12on2106.outbound.protection.outlook.com [40.107.237.106]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 19B0161CA480 for <oauth@ietf.org>; Fri, 12 Sep 2025 12:20:00 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=kpNNN1vu+gTcTFmGsJ9EM0zcSIy94cwIkDmWSaY5EZ+LyU65lHL6QvtqR28xaT/XnxNYaULFcp2NcBVSV6W2CeQvP1qoWwsWn5KNhFfdophBTi/EYRas+Ob0ZRqafMnWTxEIu9vN0DEe79fHwr8FG10c63heHAu/OolMMK4UPHSRqAUQtzZ+sAOn1IuJeqkPV3/JGq531lt7vNLcr57hLlOY19dVOafmOwvOKvPg857DvqF3Ia7S2s6yaY6JcbEaR+mbChbXm0+M/loY9aXiGm/7IhZI3eO+D1l+VJXpyfIj4xEaIF3CCaP92PE1t+Y/ZmDkn9+r0PZCJBDFbnp7mQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=bqVDSLIrwHjJpW76vy3J+SBVfuKfgW3oz1WPV5yLI8A=; b=ev92qk4zKp+G8rZ950GIYBQHA9bBsWh6dXtSnpIDdWoXyeM82dRFcfc1dbkt8VjW7j/N2dSI00h0/7W7IE/nIh87P0U32wmZi/l1HaVgsDdNPVkNoL1d7Z6nWbxE/od0A77ar7u7mfwScIagacA6/AVG4gFLLHsrgdYn+W2+Au4VRYM6PLLBEJ2r1waR2isqi+PYVa6NSHATxf1HeAjD4gCWp4OnlMTLFa4y5Cn83HIUvpC+Iw7iAExGcux3CzJxlLE3Ja3wNz8ebW4wq+cW8gJWMN8Aq3qnLgM5lCvkSlqKp3MW4oktuQMgKRcLnyADX2qzVF1ScXcb0m5eXSjtXQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cloudauth.dev; dmarc=pass action=none header.from=cloudauth.dev; dkim=pass header.d=cloudauth.dev; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cloudauth.dev; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bqVDSLIrwHjJpW76vy3J+SBVfuKfgW3oz1WPV5yLI8A=; b=lFs3DTIrhMQETT8okAFxMDrlun2ADwqs0Rf+5857xKUUpQt1jmoZbeRJfUsZfY/Bg+goR/fmC5iFbD2VTz9xWnU6D6hcsYRZknNzwSKN/BdYXIlNO692rWM9GJodVvS1vPcSkNUvRGTdpMLxF8yf4/DgNpMvwtGBAEv5qbDVgJQosHSlI2NzVz0JqR2ztgvkFkWTmvygl73fhiYbeHBYCi6i9sZ20LmXDuQmB+9P/7QZpm1OaVZrcBEtWxHpVnM//GTMRkPmSKPKB6nFE3civoHmXq7IK1rSBWspj3ixH9rK7tE7CciZycPspEaFH7t0BrXpblFXbUhEsb4g1VeOEw==
Received: from SN7PR13MB6280.namprd13.prod.outlook.com (2603:10b6:806:2e9::5) by PH0PR13MB4841.namprd13.prod.outlook.com (2603:10b6:510:a0::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9094.22; Fri, 12 Sep 2025 19:19:52 +0000
Received: from SN7PR13MB6280.namprd13.prod.outlook.com ([fe80::f7f0:144d:d26b:789b]) by SN7PR13MB6280.namprd13.prod.outlook.com ([fe80::f7f0:144d:d26b:789b%5]) with mapi id 15.20.9094.021; Fri, 12 Sep 2025 19:19:51 +0000
From: Tim Cappalli <timcappalli@cloudauth.dev>
To: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>, oauth <oauth@ietf.org>
Thread-Topic: [OAUTH-WG] Call for WG Feedback on DID Resolution in SD-JWT VC
Thread-Index: AQHcJAXVpwxZG5j8O0qZNnLHorqaVLSP7EFU
Date: Fri, 12 Sep 2025 19:19:51 +0000
Message-ID: <SN7PR13MB6280939AF7F8556D3366C115A008A@SN7PR13MB6280.namprd13.prod.outlook.com>
References: <CADNypP88y_pt=Xq95j_KfFF6PXJmdQm93A53E_xLhUZpkqYNZQ@mail.gmail.com>
In-Reply-To: <CADNypP88y_pt=Xq95j_KfFF6PXJmdQm93A53E_xLhUZpkqYNZQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cloudauth.dev;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: SN7PR13MB6280:EE_|PH0PR13MB4841:EE_
x-ms-office365-filtering-correlation-id: 1e79ea94-83c9-493d-9f0a-08ddf231591d
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|8096899003|7053199007|38070700021;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN7PR13MB6280.namprd13.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(8096899003)(7053199007)(38070700021);DIR:OUT;SFP:1102;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_SN7PR13MB6280939AF7F8556D3366C115A008ASN7PR13MB6280namp_"
MIME-Version: 1.0
X-OriginatorOrg: cloudauth.dev
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SN7PR13MB6280.namprd13.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 1e79ea94-83c9-493d-9f0a-08ddf231591d
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Sep 2025 19:19:51.8601 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 179ed508-933e-4031-94a9-0fc369901b63
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: PjE/MEVpRNmA55NF26+wbzXqgqX6efWaoGQ2d6K6rGylcSs13q4e7F37B/uWTFH8r7gF/XX4GgUx6GoqHoF+xhG6hkXTDeiwiqg8aqbEKOA=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR13MB4841
Message-ID-Hash: Y5QGXRGOGNS34H6JMM6AZADIHCXZWJOP
X-Message-ID-Hash: Y5QGXRGOGNS34H6JMM6AZADIHCXZWJOP
X-MailFrom: timcappalli@cloudauth.dev
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-oauth.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [OAUTH-WG] Re: Call for WG Feedback on DID Resolution in SD-JWT VC
List-Id: OAUTH WG <oauth.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/BbnnIyjII0zvFRE_xPkOq1wH0p8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Owner: <mailto:oauth-owner@ietf.org>
List-Post: <mailto:oauth@ietf.org>
List-Subscribe: <mailto:oauth-join@ietf.org>
List-Unsubscribe: <mailto:oauth-leave@ietf.org>

Based on the previous discussions and the opportunity for this to live as an extension, I support removal.

Tim

From: Rifaat Shekh-Yusef <rifaat.s.ietf@gmail.com>
Date: Friday, September 12, 2025 at 12:53
To: oauth <oauth@ietf.org>
Subject: [OAUTH-WG] Call for WG Feedback on DID Resolution in SD-JWT VC

All,

This is an official call for getting the WG’s opinion on the last open issue in draft-ietf-oauth-sd-jwt-vc-10 concerning the removal of the DID Document Resolution.

In an early version of the SD-JWT VC document, we had three Issuer-signed JWT Verification Key Validation techniques:

  1.  JWT VC Issuer Metadata
  2.  X509 based certificates
  3.  DID Document Resolution

Do you agree with the removal of the DID Document Resolution option from the SD JWT VC specification?

Please note that this does not prevent future extensions. Interested parties are free to define and publish an extension that adds DID Document Resolution support, if desired.

Please, reply on the mailing list with your preference by October 3rd.

Regards,
 Rifaat & Hannes

v2.46.0 | Report a Bug | By Email | System Status