[Openid-specs-ab] Issue #1230: Adopt Presentation Exchange as an officially supported mechanism within SIOP (openid/connect)
david at alkaline-solutions.com
Fri May 7 05:36:36 UTC 2021
> On May 6, 2021, at 7:56 PM, nadalin--- via Openid-specs-ab <openid-specs-ab at lists.openid.net> wrote:
> So why have we spent time on this in OIDF of DIF has done this,
DIF has not “done this”. Presentation exchange is a data model for representing a requested format for presentations, and for providing additional metadata for understanding the response. It is not a protocol, and specifically defines carve-outs for the actual request/response to be defined by separate specifications like SIOP.
OIDC has a simpler scheme for requesting claims, so the decision was likely made to model that option for the initial submission. I would be surprised if people were unwilling to collaborate on a common ground with DIF, considering the current SIOP work is a joint effort between DIF and OIDF.
> this is just another reason why we should not adopt this until we get issues worked out,
“We” (Connect A/B group) will not get technical issues worked out until we accept something as input. This is currently an external document.
Although I cannot speak for everyone, my ability to justify contributions to non-adopted documents and to work under ‘handshake’ IPR does have limits.
> There is no real reason to do this in OIDF, any work can be done in DIF to fit this into SIOP.
I would think that changes to SIOP to support new representations of authentication and of claims are squarely in scope of the Connect A/B group. Although my employer was not participating in DIF at the time, I suspect this is the opinion by some of the DIF membership as well, hence the current joint effort.
> I'm surprised that this was not all worked out before Mike and others created this draft.
The purpose of an adopting a submission is not to have a small subset of people work on a document in their own GitHub repo without any IPR protection until they are ready for it to be a ratified standard. A side-effect of this work not being an adopted item is that I was unaware of it until rather recently.
Also, I would like to point out that this issue from Daniel was in part a result of me reaching out to him in _anticipation_ of this becoming an adopted document and wanting his input (as primary editor of Presentation Exchange). My hope is that we will reach the other side of SIOP not just being compatible with PE, but providing feedback to make PE an even more capable specification.
More information about the Openid-specs-ab