<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"ＭＳ ゴシック";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"ＭＳ Ｐゴシック";
panose-1:2 11 6 0 7 2 5 8 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"\@ＭＳ ゴシック";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"\@ＭＳ Ｐゴシック";
panose-1:2 11 6 0 7 2 5 8 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0mm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"ＭＳ Ｐゴシック";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0mm;
mso-margin-bottom-alt:auto;
margin-left:0mm;
font-size:12.0pt;
font-family:"ＭＳ Ｐゴシック";}
span.hoenzb
{mso-style-name:hoenzb;}
span.20
{mso-style-type:personal-reply;
font-family:"Arial",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:99.25pt 30.0mm 30.0mm 30.0mm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026">
<v:textbox inset="5.85pt,.7pt,5.85pt,.7pt" />
</o:shapedefaults></xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=JA link=blue vlink=purple style='word-wrap: break-word;-webkit-nbsp-mode: space;-webkit-line-break: after-white-space'><div class=WordSection1><p class=MsoNormal><a name="_MailEndCompose"><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'>Just made a change to the change set e77a5e9, and <o:p></o:p></span></a></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'>You can see the diff at </span><a href="https://bitbucket.org/openid/fapi/wiki/commits/e77a5e98060ea4b61ed1ffd02e0ee0fe1600216d"><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif'>https://bitbucket.org/openid/fapi/wiki/commits/e77a5e98060ea4b61ed1ffd02e0ee0fe1600216d</span></a><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'>Hope this works. <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"ＭＳ ゴシック";color:#1F497D'>--<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"ＭＳ ゴシック";color:#1F497D'>PLEASE READ :This e-mail is confidential and intended for the<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"ＭＳ ゴシック";color:#1F497D'>named recipient only. If you are not an intended recipient,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"ＭＳ ゴシック";color:#1F497D'>please notify the sender and delete this e-mail.<o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#1F497D'><o:p> </o:p></span></p><div style='border:none;border-left:solid blue 1.5pt;padding:0mm 0mm 0mm 4.0pt'><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0mm 0mm 0mm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Openid-specs-fapi [mailto:openid-specs-fapi-bounces@lists.openid.net] <b>On Behalf Of </b>Preibisch, Sascha H via Openid-specs-fapi<br><b>Sent:</b> Tuesday, August 23, 2016 12:38 PM<br><b>To:</b> John Bradley <jbradley@pingidentity.com>; Financial API Working Group List <openid-specs-fapi@lists.openid.net>; Suhas Chatekar <suhas.chatekar@gmail.com><br><b>Subject:</b> Re: [Openid-specs-fapi] Proposal to use DDA specification in FAPI<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>I agree to only allow the access_token in the header or as POST body parameter. The access_token should not become visible to anybody when being in front of a browser.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>Sascha<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0mm 0mm 0mm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'>From: </span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:black'>Openid-specs-fapi <<a href="mailto:openid-specs-fapi-bounces@lists.openid.net">openid-specs-fapi-bounces@lists.openid.net</a>> on behalf of John Bradley via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net">openid-specs-fapi@lists.openid.net</a>><br><b>Reply-To: </b>John Bradley <<a href="mailto:jbradley@pingidentity.com">jbradley@pingidentity.com</a>>, Financial API Working Group List <<a href="mailto:openid-specs-fapi@lists.openid.net">openid-specs-fapi@lists.openid.net</a>><br><b>Date: </b>Monday, August 22, 2016 at 2:40 PM<br><b>To: </b>Suhas Chatekar <<a href="mailto:suhas.chatekar@gmail.com">suhas.chatekar@gmail.com</a>><br><b>Cc: </b>Financial API Working Group List <<a href="mailto:openid-specs-fapi@lists.openid.net">openid-specs-fapi@lists.openid.net</a>><br><b>Subject: </b>Re: [Openid-specs-fapi] Proposal to use DDA specification in FAPI<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>Yes RFC 6750 recommends sending the AT in the header. It however also allows some backwarrds compatibility modes such as passing it as a query parameter. <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>Mostly this is used by lazy developers these days. I think Nat and I are recommending only allowing the header option, and by doing that using GET is not such an issue.<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>John B.<o:p></o:p></span></p></div></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>On Mon, Aug 22, 2016 at 1:31 PM, Suhas Chatekar <<a href="mailto:suhas.chatekar@gmail.com" target="_blank">suhas.chatekar@gmail.com</a>> wrote:<o:p></o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0mm 0mm 0mm 6.0pt;margin-left:4.8pt;margin-right:0mm'><p><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>I am new to the group so apologies if I am duplicating something that is sent earlier to the group. <o:p></o:p></span></p><p><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>There is a IETF standard on how to send access token in HTTP headers as bearer tokens - <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_rfc6750&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=-PlgNtYyTH-wVrRKa4NYpirnUOA2u7vdVsQdTQg2XeU&e=" target="_blank">https://tools.ietf.org/html/rfc6750</a><o:p></o:p></span></p><p><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>May be we can just adopt this standard?<o:p></o:p></span></p><p><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:#888888'>Suhas<o:p></o:p></span></p><div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p><div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>On Mon, 22 Aug 2016, 16:23 Nat Sakimura via Openid-specs-fapi, <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>> wrote:<o:p></o:p></span></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0mm 0mm 0mm 6.0pt;margin-left:4.8pt;margin-right:0mm'><div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>We can certainly constrain that it has to be sent in the header. <br><br>Sent from iPad<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><br>2016/08/22 23:48</span><span style='font-size:10.5pt;color:black'>、</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>John Bradley via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>> </span><span style='font-size:10.5pt;color:black'>のメッセージ</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>:<o:p></o:p></span></p></div></div><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>It is a debate that we keep having, mostly around backwards compatibility and people wanting to send the acess token as a paramater rather than in a headder. <o:p></o:p></span></p><p><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>If we prohibit sending the AT as a query paramater, I am more than happy with GET for read only. <o:p></o:p></span></p><p><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>John B. <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>On Aug 22, 2016 10:59 AM, "Luis SAIZ GIMENO via Openid-specs-fapi" <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>> wrote:<o:p></o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0mm 0mm 0mm 6.0pt;margin-left:4.8pt;margin-right:0mm'><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>Hi, <o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>Maybe it's not a subject for this list but it sounds odd to me the use of POST for "get" info. In order to be more consistent with REST APIs and to avoid mistakes in authorization rules/scopes I think it should be used GET for read-only operations and POST(PUT/DELETE) for write operations ("transfer" scope)<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>The use of GET vs POST for security reasons dates from the early HTTP RFC when TLS was uncommon (HTTP predates TLS). Nowadays and even more in a financial scenario, all transfers must be done under TLS and so no sensitive info can be leaked in proxies. Web servers has access to the full info regardless GET/POST, it's a server-side responsibility to configure web servers audit logs for not logging sensitive information<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>Recommendations of W3C:<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.w3.org_2001_tag_doc_whenToUseGet.html&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=mRUcmZ-pW0zyv3xocmascLFuQEO2Aq2J_vTZFz0gQ1k&e=" target="_blank">https://www.w3.org/2001/tag/doc/whenToUseGet.html</a><o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>BTW, HEART WG explicitly refers to RESTful APIs but FAPI don't. Should we consider and discuss about it?<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>Best,<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>Luis<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>-------<o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>"Crypto can't create trust It merely automates the trust that already exists for other reasons" -- John Gilmore <o:p></o:p></span></p></div><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>2016-06-09 2:34 GMT+02:00 Saxena, Anoop <<a href="mailto:Anoop_Saxena@intuit.com" target="_blank">Anoop_Saxena@intuit.com</a>>:<o:p></o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0mm 0mm 0mm 6.0pt;margin-left:4.8pt;margin-right:0mm'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'>Hello All,<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'>FS-ISAC working group ratified a solution that will replace credential based aggregation of data via screen scraping bank website with OAUTH 2.x & DDA (durable data API).<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'>Recommendation for Open Id FAPI working group to use Durable Data API as base which defines various entities definition (such as Account, transactions etc.. ). <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'>These entities are returned under the scope of OAUTH token.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'>Note: See attachment for detail DDA Specification.<o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'> <o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#365EBF'>Thanks,</span><span lang=EN-US style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:7.5pt;font-family:"Verdana",sans-serif;color:#365EBF'> </span><span lang=EN-US style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:#365EBF'>Anoop Saxena</span><span lang=EN-US style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:#365EBF'>Architect<br></span><b><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#65A0DC'>Intuit |</span></b><b><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#929292'> simplify the business of life</span></b><b><sup><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:gray'>tm</span></sup></b><span lang=EN-US style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='color:black'> <o:p></o:p></span></p></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><br>_______________________________________________<br>Openid-specs-fapi mailing list<br><a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.openid.net</a><br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfapi&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=OxU88Yoaza6iwupZJpdBGJKWpEHSD3z07lNohEjq8lk&e=" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a><o:p></o:p></span></p></blockquote></div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><br><br clear=all><o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>-- <o:p></o:p></span></p><div><div><div><div><div><div><div><div><div><div><p style='margin:0mm;margin-bottom:.0001pt'><b><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#094FA4'>BBVA</span></b><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='margin:0mm;margin-bottom:.0001pt'><b><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#009EE5'>Luis Saiz Gimeno</span></b><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='margin:0mm;margin-bottom:.0001pt;line-height:150%'><b><span lang=EN-US style='font-size:10.0pt;line-height:150%;font-family:"Arial",sans-serif;color:#094FA4'>Innovation in Security</span></b><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='margin:0mm;margin-bottom:.0001pt;line-height:150%'><span lang=EN-US style='font-size:10.0pt;line-height:150%;font-family:"Arial",sans-serif;color:#094FA4'>Móvil <a href="tel:%2B34%C2%A0609703264" target="_blank">+34 609703264</a> - Tel. <a href="tel:%2B34%C2%A0918073152" target="_blank">+34 918073152</a> - </span><span lang=EN-US style='font-size:10.5pt;line-height:150%;font-family:"Calibri",sans-serif;color:black'><a href="mailto:luis.saiz@bbva.com" target="_blank"><span style='font-size:10.0pt;line-height:150%;font-family:"Arial",sans-serif'>luis.saiz@bbva.com</span></a><o:p></o:p></span></p><p style='margin:0mm;margin-bottom:.0001pt'><strong><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#009EE5'>Engineering - Architecture & Global Deployment </span></strong><span lang=EN-US style='font-size:10.0pt;font-family:"Arial",sans-serif;color:#094FA4'>– Monforte de Lemos, s/n, 28029</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='margin:0mm;margin-bottom:.0001pt'><span lang=EN-US style='font-size:7.5pt;font-family:"Arial",sans-serif;color:#094FA4'>Maps: <a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.google.es_maps_place_Av.-2Bde-2BMonforte-2Bde-2BLemos-2C-2B28-2C-2B28029-2BMadrid_&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=vaitlrZb8eJhUuiVyBxeBIECO3PSzeOPTKrdGGdLFvU&e=" target="_blank">https://www.google.es/maps/place/Av.+de+Monforte+de+Lemos,+28,+28029+Madrid/</a></span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='margin:0mm;margin-bottom:.0001pt'><span lang=EN-US style='font-size:7.0pt;font-family:"Arial",sans-serif;color:#86C82D'>Antes de imprimir este mensaje, por favor comprueba que es necesario hacerlo. </span><span lang=EN-GB style='font-size:7.0pt;font-family:"Arial",sans-serif;color:#86C82D'>Before you print this message please consider if it is really necessary.</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p></div></div></div></div></div></div></div></div></div></div></div></div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p><p style='background:white'><span lang=EN-US style='font-size:7.0pt;font-family:"Arial",sans-serif;color:#758087'>"Este mensaje está dirigido de manera exclusiva a su destinatario y puede contener información privada y confidencial. No lo reenvíe, copie o distribuya a terceros que no deban conocer su contenido. En caso de haberlo recibido por error, rogamos lo notifique al remitente y proceda a su borrado, así como al de cualquier documento que pudiera adjuntarse.</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='background:white'><span lang=EN-US style='font-size:7.0pt;font-family:"Arial",sans-serif;color:#758087'> Por favor tenga en cuenta que los correos enviados vía Internet no permiten garantizar la confidencialidad de los mensajes ni su transmisión de forma íntegra.</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='background:white'><span lang=EN-US style='font-size:7.0pt;font-family:"Arial",sans-serif;color:#758087'> Las opiniones expresadas en el presente correo pertenecen únicamente al remitente y no representan necesariamente la opinión del Grupo BBVA."</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='background:white'><span lang=EN-US style='font-size:7.0pt;font-family:"Arial",sans-serif;color:#758087'> "This message is intended exclusively for the adressee and may contain privileged and confidential information. Please, do not disseminate, copy or distribute it to third parties who should not receive it. In case you have received it by mistake, please inform the sender and delete the message and attachments from your system.</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p style='background:white'><span lang=EN-GB style='font-size:7.0pt;font-family:"Arial",sans-serif;color:#758087'> </span><span lang=EN-US style='font-size:7.0pt;font-family:"Arial",sans-serif;color:#758087'>Please keep in mind that e-mails sent by Internet do not allow to guarantee neither the confidentiality or the integrity of the messages sent."</span><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><br>_______________________________________________<br>Openid-specs-fapi mailing list<br><a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.openid.net</a><br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfapi&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=OxU88Yoaza6iwupZJpdBGJKWpEHSD3z07lNohEjq8lk&e=" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a><o:p></o:p></span></p></blockquote></div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div></div></blockquote><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>_______________________________________________<br>Openid-specs-fapi mailing list<br><a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.openid.net</a><br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfapi&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=OxU88Yoaza6iwupZJpdBGJKWpEHSD3z07lNohEjq8lk&e=" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a><o:p></o:p></span></p></div></blockquote></div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>_______________________________________________<br>Openid-specs-fapi mailing list<br><a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.openid.net</a><br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfapi&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=OxU88Yoaza6iwupZJpdBGJKWpEHSD3z07lNohEjq8lk&e=" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a><o:p></o:p></span></p></blockquote></div></div></div></blockquote></div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><br><br clear=all><o:p></o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'><o:p> </o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri",sans-serif;color:black'>-- <o:p></o:p></span></p><div><div><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr><td width=113 style='width:84.75pt;padding:0mm 0mm 0mm 0mm'><p class=MsoNormal><span lang=EN-US><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.pingidentity.com&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=kX9YMc9bHJieQZvW5XXfNlv9-HSUsg16tyweuW60-R8&e=" target="_blank"><span style='border:solid windowtext 1.0pt;padding:0mm;text-decoration:none'><img border=0 width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1025" src="cid:~WRD000.jpg" alt="イメージは差出人によって削除されました。 Ping Identity"></span></a><o:p></o:p></span></p></td><td style='padding:0mm 0mm 0mm 0mm'><table class=MsoNormalTable border=0 cellpadding=0><tr><td valign=top style='padding:.75pt .75pt .75pt .75pt'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#E61D3C'>John Bradley</span></b><span lang=EN-US><br></span><span lang=EN-US style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black'>Sr Technical Architect</span><span lang=EN-US><br></span><span lang=EN-US style='font-size:10.5pt;font-family:"Arial",sans-serif'><a href="mailto:jbradley@pingidentity.com" target="_blank">jbradley@pingidentity.com</a></span><span lang=EN-US><br></span><span lang=EN-US style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black'>w: </span><span lang=EN-US><br></span><span lang=EN-US style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black'>c: +1 202.630.5272</span><span lang=EN-US><o:p></o:p></span></p></td></tr></table></td></tr><tr><td colspan=2 style='padding:0mm 0mm 0mm 0mm'><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width="100%" style='width:100.0%;border-collapse:collapse'><tr style='height:30.0pt'><td style='padding:.75pt .75pt .75pt .75pt;height:30.0pt'><p class=MsoNormal style='margin-top:6.0pt'><b><span lang=EN-US style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#40474B'>Connect with us: <o:p></o:p></span></b></p></td><td style='padding:3.0pt 0mm 0mm 15.0pt;height:30.0pt'><p class=MsoNormal style='margin-top:6.0pt'><span lang=EN-US><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.glassdoor.com_Overview_Working-2Dat-2DPing-2DIdentity-2DEI-5FIE380907.11-2C24.htm&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=PD9315f6kW9bfb6_G2q9q-uA8VPfuAqLr_aS-UVKOOI&e=" target="_blank" title="Ping on Glassdoor"><span style='border:solid windowtext 1.0pt;padding:0mm;text-decoration:none'><img border=0 width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1026" src="cid:~WRD000.jpg" alt="イメージは差出人によって削除されました。 Glassdoor logo"></span></a><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.linkedin.com_company_21870&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=KJihPz8jzRH6HwzxvoqQxAJE9Nfmde3zXO_tHw_1PQ8&e=" target="_blank" title="Ping on LinkedIn"><span style='border:solid windowtext 1.0pt;padding:0mm;text-decoration:none'><img border=0 width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1027" src="cid:~WRD000.jpg" alt="イメージは差出人によって削除されました。 LinkedIn logo"></span></a><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__twitter.com_pingidentity&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=Ke6hIQ9k9koR9epgEE6JFTBmZot_aaT4jYOioGSF3QY&e=" target="_blank" title="Ping on Twitter"><span style='border:solid windowtext 1.0pt;padding:0mm;text-decoration:none'><img border=0 width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1028" src="cid:~WRD000.jpg" alt="イメージは差出人によって削除されました。 twitter logo"></span></a><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.facebook.com_pingidentitypage&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=33aG4dKuS2A33uDgS3q_kW1lD1WdC4Hj_0mr362_MZQ&e=" target="_blank" title="Ping on Facebook"><span style='border:solid windowtext 1.0pt;padding:0mm;text-decoration:none'><img border=0 width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1029" src="cid:~WRD000.jpg" alt="イメージは差出人によって削除されました。 facebook logo"></span></a><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.youtube.com_user_PingIdentityTV&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=-gVTCHbgO66E2c03WWWG4asrAKbkFfZ40-6rW02GW4A&e=" target="_blank" title="Ping on Youtube"><span style='border:solid windowtext 1.0pt;padding:0mm;text-decoration:none'><img border=0 width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1030" src="cid:~WRD000.jpg" alt="イメージは差出人によって削除されました。 youtube logo"></span></a><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__plus.google.com_u_0_114266977739397708540&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=A8-cUg_bVSaGE0-g7uzk3A3M3GfWQdB1kLUFy1WDf-c&e=" target="_blank" title="Ping on Google+"><span style='border:solid windowtext 1.0pt;padding:0mm;text-decoration:none'><img border=0 width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1031" src="cid:~WRD000.jpg" alt="イメージは差出人によって削除されました。 Google+ logo"></span></a><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.pingidentity.com_en_blog.html&d=DQMFaQ&c=_hRq4mqlUmqpqlyQ5hkoDXIVh6I6pxfkkNxQuL0p-Z0&r=BjnOFeRZMwPBZLm00SguJm4i4lt0O13oAeF-9EZheL8&m=mM1GN701RJiAVHfv8G1aDzNyvi-IsAr4cOBvyYfL7uU&s=oYyJ-X5rpFfML9k3daNkZ1VMFzTViMp1ValAjajeA6o&e=" target="_blank" title="Ping Blog"><span style='border:solid windowtext 1.0pt;padding:0mm;text-decoration:none'><img border=0 width=100 height=100 style='width:1.0416in;height:1.0416in' id="_x0000_i1032" src="cid:~WRD000.jpg" alt="イメージは差出人によって削除されました。 Blog logo"></span></a><o:p></o:p></span></p></td></tr></table></td></tr></table><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p></div></div></div></div></div></div></div></body></html>