Most of the examples have "iss": "https://example.com/issuer" for the issuer of the SD-JWT and the KB-JWT has "aud": "https://example.com/verifier", for the verifier. It's not wrong but a little weird to show examples where these two entities have the same domain or shared etld+1 so could share cookies. Changing to something like https://issuer.example.com and https://verifier.example.org respectively might make for a better example.
bc-pi
commented
1 year ago
Most of the examples have
"iss": "https://example.com/issuer"for the issuer of the SD-JWT and the KB-JWT has"aud": "https://example.com/verifier",for the verifier. It's not wrong but a little weird to show examples where these two entities have the same domain or shared etld+1 so could share cookies. Changing to something like https://issuer.example.com and https://verifier.example.org respectively might make for a better example.