OpenID4VP icon indicating copy to clipboard operation
OpenID4VP copied to clipboard

Move the response encryption key remark outside of the new parameters list

Open yaromin opened this issue 1 year ago • 0 comments

This fragment cuts the list into two fragments. It is unclear whether the request_uri_method that follows is still part of the same list and why the description of something that is not a new parameter appears here.

A public key to be used by the Wallet as an input to the key agreement to encrypt Authorization Response (see (#jarm)). It MAY be passed by the Verifier using the jwks or the jwks_uri claim within the client_metadata or client_metadata_uri request parameter.

I would reword it slightly ...

If encryption of the Authorization Response is needed, the public key to be used by the Wallet as an input to the key agreement to encrypt Authorization Response (see (#jarm)) MAY be passed by the Verifier using the jwks or the jwks_uri claim in the Client Metadata.

... and move it after the request_uri_method. https://github.com/openid/OpenID4VP/blob/9a8ac76f93d0240767d92152085ae08c420d71cc/openid-4-verifiable-presentations-1_0.md?plain=1#L276

Any opinions?

yaromin avatar May 16 '24 13:05 yaromin