[OIDC4VCI] Lack of explanation of nonce mechanim

The current text first introduces how nonces are represented in proofs, then that sometimes a nonce is sent from the Issuer in the Credential Response, and then the error is introduced when the proof is missing.

The text needs a clear explanation of the underlying concept before the individual mechanisms are introduced. The current explanation is somewhat backwards and there is no guidance for clients how to deal with nonces. It is also implied, but not explained, that nonces can be replaced by fresh nonces.

Comments (3)