[Openid-specs-mobile-profile] Fwd: MODRNA WG Call Sept 7th 2016 preliminary notes

Philippe Clément philippe.clement.ft at gmail.com
Thu Sep 8 07:51:50 UTC 2016

---------- Forwarded message ----------
From: <philippe.clement at orange.com>
Date: 2016-09-08 9:49 GMT+02:00
Subject: MODRNA WG Call Sept 7th 2016 preliminary notes
To: "Torsten.Lodderstedt at telekom.de" <Torsten.Lodderstedt at telekom.de>, "
openid-specs-mobile-profile at lists.openid.net" <
openid-specs-mobile-profile at lists.openid.net>
Cc: "philippe.clement.ft at gmail.com" <philippe.clement.ft at gmail.com>

Dear all,

Please find below the preliminary notes of our MODRNA call on Sept 7th.

Charles, Joerg, Torsten, John, Bjorn, Celestin, Keith, Nicolas, Philippe,


   - Questionning API presentation by Nicolas and Charles
   - Status of other drafts

   - Client initiated backchannel authentication
   - Authentication document
   - Account migration/porting

   - Next MODRNA physical WG preparation


   1. *Questionning API presentation by Nicolas and Charles*

Questionning API (aka transaction authorization) draft document is
presented, based on Use Cases described in §1.4.
3 different flows illustrate the way to accomplish these ones. The 3rd flow
is discussed particularly, regarding complexity and alternative ways to
manage a secret code (OP URL by SMS).
Discussion to lead on the list, everyone is invited to participate,
comment, question

   1. *Sta**t**us of other drafts*

   1. Client initiated backchannel authentication

Exchanges already occurred on the list. Debates on using token endpoint,
and similarities with the OAuth device flow to examine. A new grant type to
be studied.

   1. Authentication draft

2 amr methods to be changed, Joerg to upload the new version on the

   1. Account migration/porting

Discussions have led to an approach where new OP adds to the id_token some
information identifying the old OP with an encrypted version of the
port_token, encrypted with old OP’s key, on a per RP basis.
James is incorporating the amendments in a second version of the draft.

   1. *Paris **Workshop** Sept 27th*

   1. Preparation is on the rails, primary information about the logistics
   have been provided to participants. Too many subscribers for the scheduled
   2. Polling concerning personal information is going on, consider it as a
   prerequisite for security reasons to enter the site.
   3. Torsten to prepare a detailed agenda for the 2 days.
   4. Room will be equipped with TV set (hdmi) and wifi

Kind regards,

Zeit: Mittwoch, 7. September 2016 16:00-17:00 (UTC+01:00) Amsterdam,
Berlin, Bern, Rom, Stockholm, Wien.
Ort: *https://global.gotomeeting.com/join/927253461*

Hinweis: Die oben angegebene Abweichung von GMT berücksichtigt keine
Anpassungen für Sommerzeit.


Hi all,

I would suggest to discuss the following topics:

   - Status of WG deliverables
   - Status of workshop preparation

best regards,

  << Fichier: ATT00001.txt >>


Ce message et ses pieces jointes peuvent contenir des informations
confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez
recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les
messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere,
deforme ou falsifie. Merci.

This message and its attachments may contain confidential or
privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and
delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have
been modified, changed or falsified.
Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-mobile-profile/attachments/20160908/0b5a95b4/attachment-0001.html>

More information about the Openid-specs-mobile-profile mailing list