Safari 26 on iOS 26 implements the W3C Digital Credentials API but supports only org-iso-mdoc (ISO 18013-7 Annex C). None of the OpenID4VP protocol identifiers, nor openid4vci-v1, are supported, and Apple restricts the cross-device (hybrid transport) path to Annex C requests as well.
In practice, the flows in section 6.1 to section 6.3 are unavailable on iOS, verifiers and issuers.
Proposed changes
- Add an informative note to section 8 stating that iOS 26+/Safari 26+ implements the DC API but supports only org-iso-mdoc, so the OpenID4VP-based flows in this CS are not available on Apple platforms and the fallback paths apply.
- Note that the cross-device path (section 6.2) is likewise unavailable for OpenID4VP requests targeting iOS wallets.
- Remove the "iOS AuthenticationServices" reference from section 8.1. Apple provides no registration path for OpenID4VP protocols (IdentityDocumentServices covers org-iso-mdoc only).
References
Safari 26 on iOS 26 implements the W3C Digital Credentials API but supports only org-iso-mdoc (ISO 18013-7 Annex C). None of the OpenID4VP protocol identifiers, nor openid4vci-v1, are supported, and Apple restricts the cross-device (hybrid transport) path to Annex C requests as well.
In practice, the flows in section 6.1 to section 6.3 are unavailable on iOS, verifiers and issuers.
Proposed changes
References