mDL Explained — ISO Mobile Driver's License (ISO 18013-5) | Identity Expert

This video describes identity standards as defined in published specifications. It is not a substitute for a professional security or legal review of your own implementation. Your physical driver's license is a data breach every time you hand it over. A bouncer checking your age sees your full name, home address, exact birthday, height, and eye color — everything on the card, all at once. mDL, standardized as ISO/IEC 18013-5:2021, fixes this by storing your license on your phone's secure element and letting you share only the fields a verifier specifically requests. In this video we cover: — Why physical ID over-shares by design and what the industry tried before the standard — The hotel minibar analogy that makes selective disclosure intuitive — The full protocol flow: device engagement via QR or NFC, the BLE-encrypted session, the selective-disclosure request, and the signed MDOC response — The MDOC data structure — docType, issuerSigned fields, deviceSigned section — shown as readable JSON — The threat model: relay attacks, replay attacks, and issuer compromise, with the mitigation for each — What has already shipped: Apple Wallet, Google Wallet, US state DMVs, and the W3C Digital Credentials API bringing mDL to browsers — What is coming: EU eIDAS 2.0 mandating MDOC-compatible wallets, SD-JWT VC as a JSON alternative, and OID4VP as the unified presentation protocol 00:00 Channel Intro 0:24 The Hook — Physical ID Over-Shares 2:00 The Analogy — Hotel Minibar Key 3:39 The Problem — Physical ID Failures 5:30 How It Works — Device Engagement to MDOC 7:31 Payloads — MDOC Structure 9:21 Threat Model — Relay, Replay, Issuer Compromise 11:13 What's Changing — Ecosystem Adoption Sources: 1. ISO/IEC 18013-5:2021 — https://www.iso.org/standard/69084.html 2. W3C Digital Credentials API — https://wicg.github.io/digital-credentials/ 3. OpenID for Verifiable Presentations (OID4VP) — https://openid.net/specs/openid-4-verifiab... 4. IETF SD-JWT VC — https://datatracker.ietf.org/doc/html/draf... Sources cited are ISO standards, W3C specifications, OpenID Foundation specifications, and IETF drafts — all freely reproducible for educational use. For educational purposes only. Specifications evolve — always check the latest version of the standard. #mobiledriverslicense #digitalidentity #iso18013 #selectivedisclosure #identityexpert