mastodontech.de ist einer von vielen unabhängigen Mastodon-Servern, mit dem du dich im Fediverse beteiligen kannst.
Offen für alle (über 16) und bereitgestellt von Markus'Blog

Serverstatistik:

1,4 Tsd.
aktive Profile

#digitalcredentials

0 Beiträge0 Beteiligte0 Beiträge heute

So after watching the Verify identity documents on the web video from WWDC25, it's confirmed that Apple Wallet in iOS 26 will only support digital credential presentation via Digital Credentials API using the mDL-specific ISO 18013-7 Annex C protocol.

And requesting presentation requires signing the presentation request using a certificate requested through Apple Business Connect?

...I guess that's one way for a wallet to protect user privacy in this space 🫠

(I'm comparing this to Android's relatively hands-off approach to supporting things. The much more capable OID4VP protocol is the presentation protocol of choice on that platform, and afaik there's not really any restrictions on who can make presentation requests.)

Apple DeveloperVerify identity documents on the web - WWDC25 - Videos - Apple DeveloperLearn how Digital Credentials can enhance online identity verification flows. We'll cover how websites can integrate the Digital...

Do "Digital Credentials API", "OID4VP", "mdoc", and "SD-JWT-VC" mean anything to you? If so, I've got a new open source project that might interest you 👀

npm install @simpledigicreds/server
deno add jsr:@simpledigicreds/server

Features include:

  • Unencrypted requests
  • Unencrypted responses
  • Encrypted responses (following OID4VC HAIP)
  • Stateless presentation verification

A docs site is Coming Soon™, so for now check out the README for a Getting Started guide:

Feedback welcome at github.com/MasterKale/SimpleDi 😀

npm@simpledigicreds/serverPart of a collection of TypeScript-first libraries for simpler Digital Credential presentation and verification. Pairs with @simpledigicreds/browser. Latest version: 0.5.0, last published: 15 minutes ago. Start using @simpledigicreds/server in your project by running `npm i @simpledigicreds/server`. There are no other projects in the npm registry using @simpledigicreds/server.

A biometrics news website called Biometric Updates published an article yesterday about a recent FIDO Alliance webinar that I and @chrisanderson appeared on! We talked about achieving end-to-end passwordless with digital credentials, passkeys, and device-bound session token protections:

biometricupdate.com/202407/ide

I'm over the moon this morning that someone was inspired enough by what we had to say to take the time to write about it!

Happy Thursday, everyone 🤩

BiometricUpdate.com · Ideal authentication solution boils down to using best tools to stop attacksVon Joel R. McConvey