<html><body bgcolor="#FFFFFF"><div>Yes. OAuth supports RSA-SHA1 even now.<br><br>=nat<span class="Apple-style-span" style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.231373); -webkit-composition-frame-color: rgba(77, 128, 180, 0.231373); ">@TOKYO via iPhone</span></div><div><br>On 2008/12/17, at 7:08, Pat Cappelaere <<a href="mailto:pat@cappelaere.com">pat@cappelaere.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>Nat,<div><br></div><div>I was not aware of this and will look into that signature method. This would be for both OpenID and OAuth I suppose right?</div><div>Pat.</div><div><br><div><div>On Dec 16, 2008, at 5:05 PM, Nat wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div bgcolor="#FFFFFF"><div>This is very interesting. For Government related project, we should consider using RSA-SHA1 message signing which is expected in AuthN 2.1, as otherwise it cannot fulfil any of the NIST SP800-63 levels. </div><div><br></div><div>It will also serve as a live example of the new method/feature. OIDF should definitely help this out. </div><div><br></div><div>Nat Sakimura<br><br>=nat<span class="Apple-style-span" style="-webkit-composition-fill-color: rgba(175, 192, 227, 0.231373); -webkit-composition-frame-color: rgba(77, 128, 180, 0.231373); ">@TOKYO via iPhone</span></div><div><br>On 2008/12/17, at 5:03, David Recordon <<a href="mailto:drecordon@sixapart.com"><a href="mailto:drecordon@sixapart.com">drecordon@sixapart.com</a></a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>Hey Pat,<div>I think it would be finding a few parties interested in building the demonstration and then figuring out how the Foundation could help to make that happen. The Foundation should be helping to push something forward versus being the gate keeper of starting things.</div><div><br></div><div>--David</div><div><br><div><div>On Dec 16, 2008, at 11:23 AM, Pat Cappelaere wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Brian,<div><br></div><div>As you know we are trying to penetrate the NASA/DOD market and demonstrate OpenID+OAuth during an Open Geospatial Consortium demonstration in March as it could apply to automated workflows. We will have to write an engineering report describing our findings. There are many companies looking at this.</div><div><br></div><div><a href="http://xml.coverpages.org/OGC-OWS6-Testbed.html"></a><a href="http://xml.coverpages.org/OGC-OWS6-Testbed.html"><a href="http://xml.coverpages.org/OGC-OWS6-Testbed.html">http://xml.coverpages.org/OGC-OWS6-Testbed.html</a></a></div><div><br></div><div>We are trying to present a RESTful alternative to SOAP WS-* approach for a different market.</div><div><br></div><div>The scenario we have to work with is different from what Google and Yahoo have in mind (SP=OP in their case) so I am not seeing any interest in opening up the working group to a new member to discuss the issue further and try to support us.</div><div><br></div><div>If the OIDF were to be interested in this technology demonstration from a strategic perspective, what would be the next steps?</div><div><br></div><div>Thanks,</div><div>Pat.</div><div><br></div><div><div><div>On Dec 16, 2008, at 1:16 PM, Brian Kissel wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div lang="EN-US" link="blue" vlink="purple"><div class="Section1"><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Another item that I forgot to put on the list, we could certainly benefit from a concerted community-wide effort to identify and reach out to potentially receptive prospective RPs, especially mainstream highly visible sites. As some of you may know, we created<span class="Apple-converted-space"> </span><a href="http://demand.openid.net/" style="color: blue; text-decoration: underline; "></a><a href="http://demand.openid.net/"><a href="http://demand.openid.net/">http://demand.openid.net/</a></a><span class="Apple-converted-space"> </span>to let OpenID users vote for what sites you’d like to see OpenID-enabled. The idea was that if we could create a groundswell of demand for the top requested sites, we could use that data to encourage those sites to implement OpenID. It got some initial interest and participation, but has died off lately. It’s a bit difficult since it requires installing a bookmarklet in your browser then remembering to use it.<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">We can certainly continue to send emails to info@, support@, webmaster@ but those usually don’t go anywhere. Personally, I’ve been using my college and business networks along with LinkedIn, but that only get us so far. But if the entire OpenID community could leverage our collective networks, that could be meaningful. For example, it would be great to have Wikipedia or Craigslist implement OpenID, but we need introductions into the organizations. I’ve personally been advocating that we target “content providers” – media companies (film, tv, radio, music, newspapers, sports, etc.) and affinity groups (corp & academic alumni networks, clubs, boy scouts, AARP, trade associations, etc.). BBC, 4-H, and AARP are already members of the OIDF. These organizations should be more receptive since they want to register lots of users/members and make it easy for them to login, and longer term to possibly share social networking profile information. Additionally, their primary focus isn’t purely commerce, so we don’t have to have all the aspects of commerce worked out to be of immediate value to them.<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">So if anyone on this list knows people at companies or organizations that should be implementing OpenID, contact them. Let them know about the OpenID Foundation and our website. Encourage them to join the Foundation and/or a<span class="Apple-converted-space"> </span><a href="http://openid.net/mailman/listinfo/" style="color: blue; text-decoration: underline; ">mailing list</a><span class="Apple-converted-space"> </span>to monitor a topic of interest to them. If they’d like to discuss joining the OpenID Foundation, have them contact any of the members of the Membership committee: Dewitt Clinton, Gary Krall, David Recordon, or Brian Kissel (me). If they want to participate in customer research, have them contact Johannes Ernst, Raj Mata, Scott Kveton, or me. You can see who the members of the various committees are at:<span class="Apple-converted-space"> </span><a href="http://wiki.openid.net/OpenID_Foundation/Committees" style="color: blue; text-decoration: underline; "></a><a href="http://wiki.openid.net/OpenID_Foundation/Committees"><a href="http://wiki.openid.net/OpenID_Foundation/Committees">http://wiki.openid.net/OpenID_Foundation/Committees</a></a><o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">If they want to implement OpenID on their websites, point them to the various open source libraries or service providers that help companies with implementation. And yes, this is self-serving for JanRain since we do both, but feel free to point them to any resources that you think can help them. For OpenID to expand its relevance beyond tech savvy users and user generated content applications, we need broader mainstream RP adoption. I’m hopeful that as soon as an average person can think of a dozen or more sites where they can use their OpenID, we’ll start to reach an inflection point where users start to demand this kind of user experience.<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Again, we welcome everyone who is interested to join the<span class="Apple-converted-space"> </span><a href="http://openid.net/pipermail/marketing/" style="color: blue; text-decoration: underline; ">marketing mailing list</a><span class="Apple-converted-space"> </span>to provide your suggestions and feedback.<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: navy; ">Cheers,</span><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: navy; "><o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: navy; "><br>Brian<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: navy; ">==============<o:p></o:p></span></b></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: navy; ">Brian Kissel<o:p></o:p></span></b></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: navy; ">Cell: 503.866.4424<o:p></o:p></span></b></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: navy; ">Fax: 503.296.5502<o:p></o:p></span></b></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; border-top-style: solid; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding-top: 3pt; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; ">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; "><span class="Apple-converted-space"> </span>Chris Messina [<a href="mailto:chris.messina@gmail.com" style="color: blue; text-decoration: underline; "></a><a href="mailto:chris.messina@gmail.com"><a href="mailto:chris.messina@gmail.com">mailto:chris.messina@gmail.com</a></a>]<span class="Apple-converted-space"> </span><br><b>Sent:</b><span class="Apple-converted-space"> </span>Monday, December 15, 2008 11:16 PM<br><b>To:</b><span class="Apple-converted-space"> </span>Brian Kissel<br><b>Cc:</b><span class="Apple-converted-space"> </span>OpenID List;<span class="Apple-converted-space"> </span><a href="mailto:board@openid.net" style="color: blue; text-decoration: underline; "></a><a href="mailto:board@openid.net"><a href="mailto:board@openid.net">board@openid.net</a></a>; Zac Bjelogrlic<br><b>Subject:</b><span class="Apple-converted-space"> </span>Re: Status of the Customer Research Committee (Was: Re: [OpenID] Several Questions for the Current & Future Board)<o:p></o:p></span></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Thanks Brian. This is a great start!<o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">I've recorded these on the wiki for now:<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><a href="https://openid.pbwiki.com/Marketing" style="color: blue; text-decoration: underline; "></a><a href="https://openid.pbwiki.com/Marketing"><a href="https://openid.pbwiki.com/Marketing">https://openid.pbwiki.com/Marketing</a></a><o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Would definitely be great to start thinking about planning specific agenda/action items and tasks to take these on in 2009!<o:p></o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">Chris<o:p></o:p></div><div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On Mon, Dec 15, 2008 at 8:29 PM, Brian Kissel <<a href="mailto:bkissel@janrain.com" style="color: blue; text-decoration: underline; "></a><a href="mailto:bkissel@janrain.com"><a href="mailto:bkissel@janrain.com">bkissel@janrain.com</a></a>> wrote:<o:p></o:p></div><div><div><p style="margin-right: 0in; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; color: rgb(31, 73, 125); ">Agreed we need to get more systematic about this. It'</span></p></div></div></div></div></div></div></span></blockquote></div></div></div></blockquote></div></div></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>general mailing list</span><br><span><a href="mailto:general@openid.net"><a href="mailto:general@openid.net">general@openid.net</a></a></span><br><span><a href="http://openid.net/mailman/listinfo/general"><a href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a></a></span><br></div></blockquote></div></blockquote></div><br></div></div></blockquote></body></html>