<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body style='font-family: Verdana,Geneva,sans-serif'>
<p>Interesting. Thanks. </p>
<p>It is colliding with IETF London though, and OIDF meeting @ London on the March 21 ... </p>
<p>Lots of things going on ... </p>
<p> </p>
<div>
<pre>---<br />Nat Sakimura
Research Fellow, Nomura Research Institute
Chairman of the Board, OpenID Foundation</pre>
</div>
<p>On 2018-01-31 10:04, Dave Tonge via Openid-specs-fapi wrote:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<div dir="ltr">
<div class="gmail_default" style="font-family: 'trebuchet ms',sans-serif;">
<div class="gmail_default" style="font-size: 12.8px;">Hi,</div>
<div class="gmail_default" style="font-size: 12.8px;"> </div>
<div class="gmail_default" style="font-size: 12.8px;">This conference may be of interest:</div>
<div class="gmail_default" style="font-family: arial,sans-serif; font-size: 12.8px;"><span style="font-family: 'trebuchet ms', sans-serif;"><a href="https://www.openbankingeurope.eu/eidas-meets-psd2-securing-access-financial-services-qualified-certificates/">https://www.openbankingeurope.eu/eidas-meets-psd2-securing-access-financial-services-qualified-certificates/</a></span></div>
<div class="gmail_default" style="font-family: arial,sans-serif; font-size: 12.8px;"><span style="font-family: 'trebuchet ms', sans-serif;"><br /></span></div>
<div class="gmail_default" style="font-family: arial,sans-serif; font-size: 12.8px;"><span style="font-family: 'trebuchet ms', sans-serif;">The spec for consultation is here: </span></div>
<div class="gmail_default" style="font-family: arial,sans-serif; font-size: 12.8px;"><span style="font-family: 'trebuchet ms', sans-serif;"><a href="https://docbox.etsi.org/ESI/Open/Latest_Drafts/ts_119495v000003_for-public-review.pdf">https://docbox.etsi.org/ESI/Open/Latest_Drafts/ts_119495v000003_for-public-review.pdf</a><br /></span></div>
<div class="gmail_default" style="font-family: arial,sans-serif; font-size: 12.8px;"><span style="font-family: 'trebuchet ms', sans-serif;"><br /></span></div>
<div class="gmail_default" style="font-family: arial,sans-serif; font-size: 12.8px;"><span style="font-family: 'trebuchet ms', sans-serif;">From a brief scan it seems that they are proposing that:</span></div>
<div class="gmail_default" style="font-family: arial,sans-serif; font-size: 12.8px;"><span style="font-family: 'trebuchet ms', sans-serif;"><br /></span></div>
<blockquote class="gmail_quote" style="font-family: arial,sans-serif; font-size: 12.8px; margin: 0px 0px 0px 0.8ex; border-left: 1px solid rgb; padding-left: 1ex;">The PSD2 specific attributes shall be included in a QCStatement within the qcStatements extension as specified in clause 3.2.6 of IETF RFC 3739 [6].</blockquote>
<div style="font-family: arial,sans-serif; font-size: 12.8px;"> </div>
<div style="font-family: arial,sans-serif; font-size: 12.8px;"> </div>
<div style="font-family: arial,sans-serif; font-size: 12.8px;">
<div class="gmail_default" style="font-family: 'trebuchet ms',sans-serif;">The general idea is that a TPP (third party provider):</div>
<div class="gmail_default" style="font-family: 'trebuchet ms',sans-serif;">1. registers with the regulator,</div>
<div class="gmail_default" style="font-family: 'trebuchet ms',sans-serif;">2. goes to a special type of CA called a QTSP (qualified trust service provider)</div>
<div class="gmail_default" style="font-family: 'trebuchet ms',sans-serif;">3. the QTSP verifies their identity and registration status with the regulator and issues a certificate with PSD2 claims embedded </div>
<div class="gmail_default" style="font-family: 'trebuchet ms',sans-serif;">4. the TPP then uses that certificate to call a banks APIs over mutual TLS</div>
</div>
</div>
<div class="gmail_default" style="font-family: 'trebuchet ms',sans-serif;"></div>
<div class="gmail_default" style="font-family: 'trebuchet ms',sans-serif;">Regards</div>
<div> </div>
-- <br />
<div class="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div style="font-size: 1em; font-weight: bold; line-height: 1.4;">
<div style="color: #616161; font-family: 'Open Sans'; font-size: 14px; font-weight: normal; line-height: 21px;">
<div style="font-family: Arial,Helvetica,sans-serif; font-size: 0.925em; line-height: 1.4; color: #dc291e; font-weight: bold;">
<div style="font-size: 14px; font-weight: normal; color: #333333; font-family: lato,'open sans',arial,sans-serif; line-height: normal;">
<div style="color: #00a4b7; font-weight: bold; font-size: 1em; line-height: 1.4;">Dave Tonge</div>
<div style="font-size: 0.8125em; line-height: 1.4;">CTO</div>
<div style="font-size: 0.8125em; line-height: 1.4; margin: 0px;"><a style="color: #835ea5; text-decoration: none;" href="http://www.google.com/url?q=http%3A%2F%2Fmoneyhubenterprise.com%2F&sa=D&sntz=1&usg=AFQjCNGUnR5opJv5S1uZOVg8aISwPKAv3A"><img style="border: none; padding: 0px; border-radius: 2px; margin: 7px;" title="Moneyhub Enterprise" src="./program/resources/blocked.gif" alt="Moneyhub Enterprise" width="200" height="50" /></a></div>
<div style="padding: 8px 0px;"><span style="color: #00a4b7; font-size: 11px; background-color: transparent;">10 Temple Back, Bristol, BS1 6FL</span></div>
<span style="font-size: 11px; line-height: 15.925px; color: #00a4b7; font-weight: bold;">t: </span><span style="font-size: 11px; line-height: 15.925px;">+44 (0)117 280 5120</span></div>
<div style="color: #616161; font-size: 14px; font-weight: normal; font-family: lato,'open sans',arial,sans-serif;"><span style="color: #00a4b7;"><span style="font-size: 11px; line-height: 15.925px;"><br /></span></span>
<div style="color: #333333; line-height: 1.4;"><span style="font-size: 0.75em;">Moneyhub Enterprise is a trading style of Momentum Financial Technology Limited which is authorised and regulated by the Financial Conduct Authority ("FCA"). Momentum Financial Technology is entered on the Financial Services Register </span><span style="font-size: 0.75em; background-color: transparent;">(FRN </span><span style="font-size: 0.75em; background-color: transparent; color: #00a4b7; font-weight: bold;">561538</span><span style="font-size: 0.75em; background-color: transparent;">) at <a href="http://fca.org.uk/register">fca.org.uk/register</a>. Momentum Financial Technology is registered in England & Wales, company registration number </span><span style="font-size: 0.75em; color: #00a4b7; font-weight: bold; background-color: transparent;">06909772</span><span style="font-size: 0.75em; background-color: transparent;"> </span><span style="color: #222222; font-family: arial,sans-serif; background-color: transparent;"><span style="font-size: xx-small;">©</span></span><span style="font-size: 0.75em; background-color: transparent;"> . </span><span style="background-color: transparent; font-size: 0.75em;">Momentum Financial Technology Limited 2016. </span><span style="background-color: transparent; font-size: 0.75em; color: #888888;">DISCLAIMER: This email (including any attachments) is subject to copyright, and the information in it is confidential. Use of this email or of any information in it other than by the addressee is unauthorised and unlawful. Whilst reasonable efforts are made to ensure that any attachments are virus-free, it is the recipient's sole responsibility to scan all attachments for viruses. All calls and emails to and from this company may be monitored and recorded for legitimate purposes relating to this company's business. Any opinions expressed in this email (or in any attachments) are those of the author and do not necessarily represent the opinions of Momentum Financial Technology Limited or of any other group company.</span></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br />
<pre>_______________________________________________
Openid-specs-fapi mailing list
<a href="mailto:Openid-specs-fapi@lists.openid.net">Openid-specs-fapi@lists.openid.net</a>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-fapi">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a>
</pre>
</blockquote>
</body></html>