Closed TelegramSam closed 11 months ago
What about the
request
message? Is it some clarification needed in regards of the signature for the DID Doc attachment?
The signature in the response is used to prove ownership over the key used in the invitation. In the request message, the only key they could prove ownership of is the one for the DID presented in the message, and that is already proven by sending an authcrypted message, per standard practice.
Am I correct here?
Discussed WG 20231004. Needs to bump the version to 1.1
Fixes #717