<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial" size="2"><span style="font-size:10pt;">
<div>Dear all, please find below the preliminary minutes of our call.</div>
<div>Any error or misunderstanding, please let me know.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<a name="BM_BEGIN"></a>
<div style="text-indent:-18pt;padding-left:18pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"><u>Participants :</u> Bjorn, Charles, Gonza, Hubert, Nicolas, Philippe, Siva, John, Shahram</span></font></div>
<div style="text-indent:-18pt;padding-left:18pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><u>Agenda</u><u> </u><u>:</u></div>
<ol style="margin:0;padding-left:18.6pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Implementer’s Draft Vote [Bjorn]</li><li style="margin-top:5pt;margin-bottom:5pt;">IIW attendance and MODRNA topics [Bjorn/All]</li><li style="margin-top:5pt;margin-bottom:5pt;">IETF 98 update [John]</li><li>FAPI/Banking Use Cases</li><li>Feedback on draft-oauth-versatile-jwt-profile [Orange/All]</li><li>UK Banking use cases/call flows [John]</li><li>GSMA CPAS work status and schedule [GSMA]</li><li style="margin-top:5pt;margin-bottom:5pt;">Issue Tracker</li><li style="margin-top:5pt;margin-bottom:5pt;">AOB</li></span></font>
</ol>
<div><u>Discussion</u><u> </u><u>:</u></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol style="margin:0;padding-left:18.6pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><b>Implementer’s Draft Vote [Bjorn]</b></li></span></font>
</ol>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">As a reminder, Bjorn mentions the opening on the vote on the 4 documents in implementers draft mode, everyone is sollicited to vote on these (link sent by email to
OIF members).</span></font></div>
<ol start="2" style="margin:0;padding-left:18.4pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;"><b>IIW attendance and MODRNA topics [Bjorn/All]</b></li></span></font>
</ol>
<div>For the OIF workshop, the MODRNA slidedeck has to be updated and forwarded to the list before the event.</div>
<div>Suggestion is made to mention the account porting spec during the IIW, this document is telco agnostic and can concern everyone.</div>
<div>regarding the 4 drafts under implementers draft, a high level view can be envisioned.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="3" style="margin:0;padding-left:18.6pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><b>IETF 98 update [John]</b></li></span></font>
</ol>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">A draft exists (Nat, Torsten<font face="Arial" size="2"><span style="font-size:10pt;"> and Nat)</span></font><font face="Arial" size="2"><span style="font-size:10pt;">,
but needs still some progress on security.</span></font></span></font></div>
<div>Mutual TLS is presented as a good candidate for server 2 server business applications.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="4" style="margin:0;padding-left:18.6pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><b>FAPI/Banking Use Cases</b></li></span></font>
</ol>
<div>For banks talking to other financial institutions, using mutual TLS makes sense, and binding access token and refresh token has to be considered for other cases. The alternative can be Token binding for native apps, and mutual TLS for server 2 server.
Security aspects have to be taken into consideration.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Is there a link between what we do in backchannel approach and FAPI ? not sure. </div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>A working draft is published in the FAPI WG: Financial API part 2, Read and Write API Security Profile.</div>
<div>Discussions about the certificate issued to a particular client and included in the software statement. A centralized certificate authority is not mandatory.</div>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="5" style="margin:0;padding-left:18.6pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><b>Feedback on draft-oauth-versatile-jwt-profile [Orange/All]</b></li></span></font>
</ol>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Not addressed.</span></font></div>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="6" style="margin:0;padding-left:18.6pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><b>UK Banking use cases/call flows [John]</b></li></span></font>
</ol>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Addressed partially in point 4, no doc regarding call flows.</span></font></div>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="7" style="margin:0;padding-left:18.6pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><b>GSMA CPAS work status and schedule [GSMA]</b></li></span></font>
</ol>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Not addressed.</span></font></div>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="8" style="margin:0;padding-left:18.6pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><b>Issue </b><b>Tracker</b></li></span></font>
</ol>
<div style="padding-left:0.6pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Not addressed.</span></font></div>
<div style="text-indent:-18pt;padding-left:18pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div style="text-indent:-18pt;padding-left:18pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div style="text-indent:-18pt;padding-left:18pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div style="text-indent:-18pt;padding-left:18pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
</span></font>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>