Skip to content

chore: clarify that Wallet Instance types do not change federation processing - #69

Merged
selfissued merged 4 commits into
mainfrom
sec5
Sep 26, 2026
Merged

selfissued merged 4 commits into
mainfrom
sec5

Conversation

@peppelinux

Copy link
Copy Markdown
Member

This PR resolves #64

It:

  • states that Wallet Instance types are informative and that federation processing does not vary by type.
  • keeps the Mobile / Web / PWAW descriptions as deployment context.
  • makes explicit that trust with the Holder uses the Wallet Provider and Wallet Attestation for every instance type.

@samuelmr samuelmr left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Still not sure why this specification needs to define wallet instance types if the behaviour of all types of wallet instances is equal.

@peppelinux

Copy link
Copy Markdown
Member Author

@samuelmr there reason why we should not remove the Wallet Instance types is because they are not federation Entity Types and they do not change processing.

Issuers, Verifiers, and other Entities always establish trust with the Holder through the Wallet Provider and the Wallet Attestation. That is the same for a native mobile app, a custodial or non-custodial web/cloud wallet, and a PWA.

They are in the document as informative deployment forms, as requested by community roughly 1.5 years ago, for two reasons:

  • This profile is not limited to native mobile wallets. Wallet Solutions are already described as mobile apps, cloud services, or other software, instantiated on a Personal Device or a Remote Service. So implementers do not assume a mobile-only architecture.

  • The Holder stays outside the Trust Chain. Some deployments, especially organizational or custodial cloud wallets, look as if the instance itself could be a Federation Entity (while it is not). The list exists so the spec can state, in one place, that this is not the case. The Holder won't stay the Trust Chain according to this architecture, regardless of how the Wallet Instance is implemented (and we list all the implementation type to definitively clarify this).

@fmarino-ipzs fmarino-ipzs left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks. I only left a couple of editorial suggestions.

Comment thread openid-federation-wallet-1_0.md Outdated
Comment thread openid-federation-wallet-1_0.md Outdated
Co-authored-by: fmarino-ipzs <77629526+fmarino-ipzs@users.noreply.github.com>
Co-authored-by: fmarino-ipzs <77629526+fmarino-ipzs@users.noreply.github.com>
@selfissued
selfissued merged commit d470d0a into main Sep 26, 2026
1 check passed

This branch was successfully deployed

1 active deployment
github-pages — 99e3c33e Deployed Sep 26, 2026 by selfissued via build-and-deploy #143
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Role of section 5 is unclear

4 participants