[Openid-specs-mobile-profile] Account Migration - First Draft

Torsten Lodderstedt torsten at lodderstedt.net
Thu Jun 23 17:00:12 UTC 2016


Hi all,

I would like to thank you all for providing so much substantiel feedback 
to the first draft. Incorporating it all requires a significant re-work 
of the draft, which will take some time. I will come back with the next 
revision as soon as possible.

best regards,
Torsten.


Am 10.06.2016 um 01:00 schrieb Torsten.Lodderstedt at telekom.de:
> Hi all,
>
> please find attached the first draft of the Account Migration protocol. The design intentionally is kept generic so it can be used to migrate user accounts among any supporting OIDC OP.
>
> Please review it and give me feedback.
>
> thanks in advance,
> Torsten.
>
> PS: I'm currently having trouble to upload the HTML and xml source to bitbucket. I will upload it as soon as possible.
>
> -----Ursprüngliche Nachricht-----
> Von: Torsten Lodderstedt [mailto:torsten at lodderstedt.net]
> Gesendet: Sonntag, 5. Juni 2016 13:43
> An: John Bradley
> Cc: Lodderstedt, Torsten; openid-specs-mobile-profile at lists.openid.net; philippe.clement.ft at gmail.com; John Bradley; jbradley at mac.com
> Betreff: Re: [Openid-specs-mobile-profile] MODRNA WG Call June 1st 2016
>
> Am 04.06.2016 um 14:17 schrieb John Bradley:
>> We can.  I think the GSMA was going to discuss our feedback.
>>
> I will draft a first version.
>
>> They had some other concerns with people doing multiple ports over a
>> short period of time.  I don't know how much history is wort
>> supporting vs increased complexity for the client
>>
> The easier approach is to ask the user to force migration at the RP by logging in after every port. Otherwise, this is ending up in signficant increased complexitity and potentially security holes.
>
>
> _______________________________________________
> Openid-specs-mobile-profile mailing list
> Openid-specs-mobile-profile at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-mobile-profile

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-mobile-profile/attachments/20160623/e8c67e38/attachment.html>


More information about the Openid-specs-mobile-profile mailing list