Signed payment request

[senexi]

The transaction data object containing the payment request object may be signed by the PSP. This way the payment request presented to the user will be cryptographically linked to originator. Unfortunately the current specifications of OpenID4VP define the transaction data object as "base64url encoded JSON object", which does not allow to use a JWT here. Requested this feature from OpenID4VP.

openid/OpenID4VP#342

[cyberphone]

May I ask a stupid question? Without any references to OpenID4VP: why would a payment authorization contain multiple signatures?

[cyberphone]

Hi @senexi, I have now "reverse engineered" your draft and believe (could still be wrong...) that the primary motivation for this request comes from: https://www.linkedin.com/posts/andersrundgren_since-payments-are-not-particularly-well-activity-7270734001852620800-gI1K/

Yes, I'm obviously not very enthusiastic about EPC's wallet efforts.