Are presentations for mso_mdoc credentials without holder binding supported?

[TimoGlastra]

An earlier version of #513 included the following text for mso_mdoc, but this was removed before the PR was merged:

Wallets MUST reject requests with this format identifier where allow_replay is set to true, as Presentations without Holder Binding are not supported for this format.

Is it implied that since key binding is required for mdocs it's not allowed to have cryptographic_holder_binding_required set to false in DCQL queries?

[Sakurann]

i would say so... @awoie @davidz25 @martijnharing et al what would be your take?

[Sakurann]

WG discussion

• yes, we on purpose left openid4vp open so mdocs without holder binding are supported. it is 18013-5 that requires device binding