How to determine the issuer for a credential?

[kalegd]

Firstly, really appreciate the work you all are doing on getting this new web API made!

As a verifier, how is one supposed to determine the issuer for a given credential? From what I can tell we need to be able to determine the issuer in order to know that the digital credential comes from a trusted source and isn't some user generated one right? Most examples I could find seem to do some magic hand waving by verifying with a POST request to some non-open-source API server.

Apologies if this hasn't been determined/documented yet and I'm a little ahead of myself!

[timcappalli]

@kalegd it would depend on the protocol and credential type used.

For example, with an SD-JWT VC, the issuer identifier will be the iss claim.