<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">I'm very much in favour of this.</div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif"><br></div><div class="gmail_default" style="font-family:trebuchet ms,sans-serif">Dave</div></div><br><div class="gmail_quote"><div dir="ltr">On Mon, 7 Jan 2019 at 22:25, n-sakimura via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net">openid-specs-fapi@lists.openid.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<div>
<div>
<div>
<div style="direction:ltr">Thanks Torsten and Daniel, </div>
<div><br>
</div>
<div style="direction:ltr">This seems to be a very good starting point for a white paper/technical report. Is there any objection to starting a work based on this?
</div>
<div><br>
</div>
<div style="direction:ltr">If so, please speak up by the end of this week. </div>
<div><br>
</div>
<div style="direction:ltr">Best, </div>
<div><br>
</div>
<div style="direction:ltr">Nat Sakimura</div>
<div style="direction:ltr">Chair, FAPI WG. </div>
</div>
<div><br>
</div>
<div class="gmail-m_7276508581745577296ms-outlook-ios-signature"><a href="https://aka.ms/o0ukef" target="_blank">Outlook for iOS</a> を入手</div>
</div>
<div> </div>
<hr style="display:inline-block;width:98%">
<div id="gmail-m_7276508581745577296divRplyFwdMsg" dir="dir="ltr""><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>差出人:</b> Openid-specs-fapi <<a href="mailto:openid-specs-fapi-bounces@lists.openid.net" target="_blank">openid-specs-fapi-bounces@lists.openid.net</a>> (Torsten Lodderstedt via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>>
の代理)<br>
<b>送信日時:</b> 火曜日, 1月 8, 2019 1:33 午前<br>
<b>宛先:</b> <a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a><br>
<b>Cc:</b> Torsten Lodderstedt<br>
<b>件名:</b> [Openid-specs-fapi] Cross-Browser Payment Initiation Attack
<div> </div>
</font></div>
<div class="gmail-m_7276508581745577296BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="gmail-m_7276508581745577296PlainText">Hi all,<br>
<br>
Daniel and I wrote a document describing a potential kind of attack on redirect based flows used to authorize and initiate payments.<br>
<br>
We would like to contribute this document to the working group.<br>
<br>
kind regards,<br>
Torsten.<br>
</div>
</span></font></div>
<div class="gmail-m_7276508581745577296BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="gmail-m_7276508581745577296PlainText"><br>
</div>
</span></font></div>
<div class="gmail-m_7276508581745577296BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="gmail-m_7276508581745577296PlainText">_______________________________________________<br>
Openid-specs-fapi mailing list<br>
<a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-fapi" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a><br>
</div>
</span></font></div>
</div>
</div>
_______________________________________________<br>
Openid-specs-fapi mailing list<br>
<a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-fapi" rel="noreferrer" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="font-size:1em;font-weight:bold;line-height:1.4"><div style="color:rgb(97,97,97);font-family:"Open Sans";font-size:14px;font-weight:normal;line-height:21px"><div style="font-family:Arial,Helvetica,sans-serif;font-size:0.925em;line-height:1.4;color:rgb(220,41,30);font-weight:bold"><div style="font-size:14px;font-weight:normal;color:rgb(51,51,51);font-family:lato,"open sans",arial,sans-serif;line-height:normal"><div style="color:rgb(0,164,183);font-weight:bold;font-size:1em;line-height:1.4"><div style="font-weight:400;color:rgb(51,51,51);line-height:normal"><div style="color:rgb(0,164,183);font-weight:bold;font-size:1em;line-height:1.4"><br></div><div style="padding:8px 0px"><div style="padding:8px 0px"><div style="color:rgb(97,97,97);font-family:"Open Sans";letter-spacing:normal"><div style="font-family:lato,"open sans",arial,sans-serif;color:rgb(51,51,51);line-height:1.4"><span style="background-color:transparent;font-size:0.75em"><br></span></div><div style="font-family:lato,"open sans",arial,sans-serif;color:rgb(51,51,51);line-height:1.4"><span style="background-color:transparent;font-size:0.75em;color:rgb(136,136,136)">DISCLAIMER: This email (including any attachments) is subject to copyright, and the information in it is confidential. Use of this email or of any information in it other than by the addressee is unauthorised and unlawful. Whilst reasonable efforts are made to ensure that any attachments are virus-free, it is the recipient's sole responsibility to scan all attachments for viruses. All calls and emails to and from this company may be monitored and recorded for legitimate purposes relating to this company's business. Any opinions expressed in this email (or in any attachments) are those of the author and do not necessarily represent the opinions of Moneyhub Financial Technology Limited or of any other group company.</span></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>