oauth-wg / draft-ietf-oauth-attestation-based-client-auth

Other
12 stars 6 forks source link

Change Client Attestation JWT to SD-JWT #20

Closed paulbastian closed 1 year ago

paulbastian commented 1 year ago

If we use SD-JWT instead of JWT for Client Attestation, things might be easier and its a good test case for using SD-JWT without Disclosures

Sakurann commented 1 year ago

SD-JWT VC as defined in draft-terbu-sd-jwt-vc without SD, right? (we should differentiate with core sd-jwt)

Sakurann commented 1 year ago

what is the use-case for the wallet attestation with selective disclosure?

paulbastian commented 1 year ago

we probably don't need selective disclosure. SD-JWT-VC gives some feature like easy holder-binding with tilde and key discovery etc that we would need replicate with plain JWTs

paulbastian commented 1 year ago

whether to rely on SD-JWT or SD-JWT-VC is yet another option to discuss

paulbastian commented 1 year ago

in the discussion on July 6th, it was agreed to stay with plain JWT for now