[Openid-specs-ab] Spec call notes 17-Mar-14

[Mike Jones]

Spec call notes 17-Mar-14

Mike Jones
Nat Sakimura
Edmund Jay
John Bradley

Agenda:
                Developer library page and specifications page
                Open Issues
                Errata

Developer library page and specifications page
                Put OpenID 2.0 libraries on old page
                Put OpenID 2.0 specs in obsolete specifications section of specifications page

Open Issues
                #922 - Session cleanup via back-channel
                                Another request for a RP logout notification endpoint
                                This is a duplicate of #916
                                The idea keeps coming up
                                It may be better to have a standard way to do this than to not support it
                                This is likely more for a group of related websites than Internet-scale use cases
                                We don't have a concrete write-up of a proposal
                                You probably need to send a signed message
                                Does the IdP need to wait for a response?  This is ideally asynchronous.
                                This could be a pure logout notice or a richer "changed" notice.
                                John volunteered to do a draft write-up

                John said that the implicit flow JavaScript example could be clearer, according to Hans
                                We could update the example in the Implicit implementer's guide
                                At some point, a bug could be filed about that

Errata:
                If people have additional errata, they should send it to the list
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20140317/f1b103e3/attachment.html>