Skip to content

Reader authentication x509 certificate header - #65

Open
martijnharing wants to merge 4 commits into
mainfrom
issue-51-readerauth_x5chain_header
Open

martijnharing wants to merge 4 commits into
mainfrom
issue-51-readerauth_x5chain_header

Conversation

@martijnharing

Copy link
Copy Markdown
Collaborator

Resolves #51
Added section on public key authentication methods, specifically X.509 certificates, and their inclusion in COSE_Signature structure.

Resolves #51 
Added section on public key authentication methods, specifically X.509 certificates, and their inclusion in COSE_Signature structure.
github-actions Bot pushed a commit that referenced this pull request Oct 5, 2026
@github-actions

github-actions Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

📄 Editor's Copy preview

https://openid.github.io/dchp/PREVIEW-DO-NOT-USE/pr-65/digital-credentials-harmonized-presentation-editors-copy.html

Preview of 4599194; updated on every push. For review only — the official specifications are published at https://openid.net/specs/

@jogu
jogu requested review from andprian and c2bo October 5, 2026 14:43
@jogu

jogu commented Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Discussed on today's WG call; no feedback, Christian & Andreea offered to review.

Some discussions about the use of the terms verifier vs reader - Matt offered to open an issue on that, that's #67

Comment thread draft/digital-credentials-harmonized-presentation.md
Comment thread draft/digital-credentials-harmonized-presentation.md Outdated
Comment thread draft/digital-credentials-harmonized-presentation.md Outdated
Comment thread draft/digital-credentials-harmonized-presentation.md Outdated
martijnharing and others added 2 commits October 15, 2026 11:06
Co-authored-by: APrian <169072044+andprian@users.noreply.github.com>
Co-authored-by: Christian Bormann <chris.bormann@gmx.de>
github-actions Bot pushed a commit that referenced this pull request Oct 15, 2026
github-actions Bot pushed a commit that referenced this pull request Oct 15, 2026
Co-authored-by: Christian Bormann <chris.bormann@gmx.de>
github-actions Bot pushed a commit that referenced this pull request Oct 15, 2026
@c2bo
c2bo self-requested a review October 15, 2026 15:10

Other mechanisms may be used and are out of scope of this document.

When using an X.509 certificate to authenticate the reader authentication public key, that certificate shall be included as an x5chain element in the protected header of the COSE_Signature structure whose signature is verified with that public key.

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
When using an X.509 certificate to authenticate the reader authentication public key, that certificate shall be included as an x5chain element in the protected header of the COSE_Signature structure whose signature is verified with that public key.
When using an X.509 certificate to convey the reader authentication public key, that certificate shall be included as an x5chain element in the protected header of the COSE_Signature structure whose signature is verified with that public key.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Define x.509 mechanism for verifier authentication

4 participants