Issues

• OpenID4VP encrypted response - Incompatible with PAYMENTS

  openid/OpenID4VP#807 · Filter by author cyberphone opened on Oct 9, 2026

• The OIDF "Payments Committee"

  openid/OpenID4VP#806 · Filter by author cyberphone opened on Oct 7, 2026
  1

• typ header not clearly defined for multisigned requests

  certfication
  openid/OpenID4VP#805 · Filter by author jogu opened on Oct 5, 2026 · Final 1.1

• Verifiers cannot authenticate or policy check the Wallet instance that presents: define Wallet instance authentication on the response

  openid/OpenID4VP#799 · Filter by author RalphBragg opened on Sep 21, 2026
  2

• Relax requirements around transaction data

  openid/OpenID4VP#794 · Filter by author davidz25 opened on Sep 8, 2026 · Final 1.1
  5

  

• session_info: is the redirect form limited to direct_post.jwt?

  discuss
  openid/OpenID4VP#793 · Filter by author fujie opened on Aug 31, 2026 · Final 1.1

• HPKE session_info requires the session that only decryption can reveal

  openid/OpenID4VP#792 · Filter by author fujie opened on Aug 31, 2026 · Final 1.1

• post quantum / PQC - how to do migration to post quantum signing with oid4vp over redirects

  openid/OpenID4VP#791 · Filter by author jogu opened on Aug 31, 2026 · 1.2 or later
  2

• invalid_transaction_data error missing from IANA registrations

  openid/OpenID4VP#789 · Filter by author jogu opened on Aug 27, 2026

• contents of wallet_metadata not clearly defined

  certfication
  openid/OpenID4VP#785 · Filter by author jogu opened on Aug 27, 2026

• Migration from SAML to OpenID4VC

  openid/OpenID4VP#784 · Filter by author fkj opened on Aug 27, 2026

• HPKE algorithm clarification

  discuss
  openid/OpenID4VP#781 · Filter by author martijnharing opened on Aug 20, 2026 · Final 1.1
  3

• what does a claims path pointer error actually mean

  openid/OpenID4VP#778 · Filter by author jogu opened on Aug 10, 2026 · Final 1.1
  2

• Credential Format Identifiers: no collision guidance, no registry

  openid/OpenID4VP#777 · Filter by author marcoscaceres opened on Aug 8, 2026
  1

• Input validation requires resource limits but names none

  openid/OpenID4VP#774 · Filter by author marcoscaceres opened on Aug 8, 2026 · Final 1.1
  1

• Does the absent-use default apply to a mixed key set?

  openid/OpenID4VP#773 · Filter by author marcoscaceres opened on Aug 8, 2026
  4

• trusted_authorities: is a mismatch advisory or a hard exclusion?

  openid/OpenID4VP#772 · Filter by author marcoscaceres opened on Aug 8, 2026
  2

• clarify meaning single use nature of request_uri

  openid/OpenID4VP#771 · Filter by author jogu opened on Aug 7, 2026

• Should Appendix A.5 incorporate Parsing of untrusted inputs?

  openid/OpenID4VP#770 · Filter by author marcoscaceres opened on Aug 7, 2026

• aki compares the keyIdentifier against the whole AuthorityKeyIdentifier

  openid/OpenID4VP#769 · Filter by author marcoscaceres opened on Aug 7, 2026

• x509_hash: is the comparison on the string or the decoded bytes?

  openid/OpenID4VP#768 · Filter by author marcoscaceres opened on Aug 7, 2026

• CDDL in B.2.6 forbids the null value the prose requires

  openid/OpenID4VP#767 · Filter by author marcoscaceres opened on Aug 7, 2026

• Which credential_ids entry must have Cryptographic Holder Binding?

  openid/OpenID4VP#766 · Filter by author marcoscaceres opened on Aug 6, 2026

• DCQL id allows __proto__ and toString as Credential Query identifiers

  openid/OpenID4VP#765 · Filter by author marcoscaceres opened on Aug 5, 2026

• Handling DCQL Queries Without the claims Field

  openid/OpenID4VP#764 · Filter by author mikolajszczepski-collab opened on Aug 3, 2026