Re: [OAUTH-WG] OAuth and JWT/VC documents

2023-09-11 Thread Tom Jones
The problem is that we need a 2 party, off-line model for the world of mobile devices. that should not depend on OAuth. ..tom On Mon, Sep 11, 2023 at 8:22 AM Orie Steele wrote: > As far as I know, OpenID and DIF both use OAuth for these cases (the 3 > party model). > > W3C focuses only on the

Re: [OAUTH-WG] OAuth and JWT/VC documents

2023-09-11 Thread Orie Steele
As far as I know, OpenID and DIF both use OAuth for these cases (the 3 party model). W3C focuses only on the data model (in JSON-LD and RDF) and lacks the expertise to focus on the other parts (including security, and transport considerations IMO.) GlobalPlatform and others are related to the