I came at the text after working on the mobile wallet for two years (EU-DCC). In that context this is purely application level with the verifier authenticating

I came at the text after working on the mobile wallet for two years (EU-DCC). In that context this is purely application level with the verifier authenticating to the wallet as part of the negotiation. The problem being that it could be implemented at the TLS level; if I was working on browsers (or didn't have experience with said apps) then that would be my conclusion. Whatever the situation: the language is too fluffy and should be updated such that it clearly makes a distinction between TLS/DNSSEC and the needs of EUDI.