<div dir="ltr">To be really clear then. Only the telco can support CIBA, correct?<div><br></div><div>Note that i voted against the MODRNA specs because, IMO, they do not uphold the user consent requirements in OpenID Connect. For FAPI to endorse the telco involvement in a financial transaction would exacerbate this failing.</div><div><br></div><div>..tom</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Peace ..tom</div></div></div></div>
<br><div class="gmail_quote">On Tue, Nov 28, 2017 at 7:16 AM, Gonzalo Fernández <span dir="ltr"><<a href="mailto:issues-reply@bitbucket.org" target="_blank">issues-reply@bitbucket.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>
<div style="font:14px/1.4285714 Arial,sans-serif;color:#333">
<table style="width:100%;border-collapse:collapse">
<tbody>
<tr>
<td style="background:#f5f5f5;padding:10px 10px 0;font:14px/1.4285714 Arial,sans-serif">
<table style="width:100%;border-collapse:collapse">
<tbody>
<tr>
<td id="m_-4675330633121102806main" style="font:14px/1.4285714 Arial,sans-serif;padding:0;background-color:#fff;border-radius:5px">
<div style="border:1px solid #ccc;border-radius:5px;padding:20px">
<table style="width:100%;border-collapse:collapse">
<tbody>
<tr>
<td style="font:14px/1.4285714 Arial,sans-serif;padding:0">
<table style="width:100%;border-collapse:collapse">
<tbody>
<tr>
<td id="m_-4675330633121102806avatar" style="font:14px/1.4285714 Arial,sans-serif;padding:0;width:32px;vertical-align:top">
<img width="32" height="32" alt="xixon2002" src="https://avatar-cdn.atlassian.com/8244b0cf5b55c82883cb9a6457821df9?s=32&ts=1511881830" style="border-radius:3px">
</td>
<td id="m_-4675330633121102806content" style="font:14px/1.4285714 Arial,sans-serif;padding:0 0 0 10px">
<table style="width:100%;border-collapse:collapse">
<tbody><tr>
<td class="m_-4675330633121102806user-action" colspan="2" style="font:14px/1.4285714 Arial,sans-serif;padding:0;line-height:1">
<span>
<strong>Gonzalo Fernández</strong> commented on issue #127:
</span>
</td>
</tr>
<tr>
<td class="m_-4675330633121102806title" colspan="2" style="font:14px/1.4285714 Arial,sans-serif;padding:5px 0 0;font-weight:bold;line-height:1.2">
<a href="https://bitbucket.org/openid/fapi/issues/127/ciba-security-issues" style="color:#3572b0;text-decoration:none" target="_blank">CIBA: security issues</a>
</td>
</tr>
<tr>
<td colspan="2" class="m_-4675330633121102806markup-content" style="font:14px/1.4285714 Arial,sans-serif;padding:10px 0 15px">
<p style="margin-bottom:0;margin:10px 0 0;padding:0;margin-top:0">Hi Nat,</p>
<p style="margin-bottom:0;margin:10px 0 0;padding:0">Telcos companies do know the device associated with a user, in fact they use such information to improve customer care when he calls for something related with the device. As far as I know, when the terminal has been registered in the network, it sends the IMEI and thanks to that the operator is able to know the device and associated it to the MSISDN and IMSI because at this time it also has that information.</p>
</td>
</tr>
<tr><td class="m_-4675330633121102806spacer" style="font:14px/1.4285714 Arial,sans-serif;padding:10px 0 0"></td><td class="m_-4675330633121102806spacer" style="font:14px/1.4285714 Arial,sans-serif;padding:10px 0 0"></td></tr>
</tbody></table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td class="m_-4675330633121102806actions" colspan="2" style="font:14px/1.4285714 Arial,sans-serif;padding:10px 0 0;border-top:1px solid #ccc;line-height:1">
<a href="https://bitbucket.org/openid/fapi/issues/127/ciba-security-issues" style="color:#3572b0;text-decoration:none" target="_blank">View this issue</a> or add a comment by replying to this email.
</td>
</tr>
</tbody>
</table>
</div>
<div style="border:1px solid #ccc;border-radius:5px;padding:20px;display:none">
<div>
</div>
</div>
</td>
</tr>
<tr>
<td style="padding:20px 0;color:#707070">
<table style="width:100%;border-collapse:collapse">
<tbody>
<tr>
<td style="padding:0">
<a style="color:#3572b0;text-decoration:none" href="https://bitbucket.org/api/1.0/repositories/openid/fapi/issue/127/unsubscribe/tomcjones/f30a0030618b6476696b7a6f4abe3a0090d0f6ad/" target="_blank">Unsubscribe from issue emails</a> for this repository.
</td>
<td style="padding:0">
<img width="1" height="1" src="https://bitbucket.org/account/notifications/mark-read/767491557/cd8c121f6d52a6046bcfcb9d9159b56ce62dee94/">
</td>
<td style="text-align:right;width:100px;padding:0">
<a href="https://bitbucket.org" style="color:#3572b0;text-decoration:none" target="_blank">
<img width="125" height="18" src="https://d301sr5gafysq2.cloudfront.net/370568ebc84f/img/email/bitbucket-footer.gif" alt="Bitbucket">
</a>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</blockquote></div><br></div>