[Openid-specs-ab] Spec call notes 17-Aug-15

[Edmund Jay]

Spec call notes 17-Aug-15

John BradleyNat Sakimura
Edmund Jay

Agenda     Issues    RP Certification
    Events


Issues    #974 - Deprecated algorithm RSA1_5 used in spec examples and self-issued               For Self-Issued, it may be better to move to Elliptic Curve instead of RSA-OAEP.               But this move is not suitable as an errata action.               Core Section 7.3 Request needs to be clarified as to from where it should get the key.               Last sentence of 7.3 should have a reference to 7.4 on where to obtain the key.
    #975 - Add additional related specs to Core http://openid.net/specs/openid-connect-core-1_0.html#RelatedSpecs               Additional specs will be added.

    #976 - Unregistered openid2_realm and openid2_id              These parameters will be registered in IANA registry.
   #977 - How to handle an unsupported response_mode?              A HTTP 400 response will be added as an errata.
   #978 - URL for erratas              It is better not to over-write the content of a URI unless it is purely editorial since it may be reference by other specs.


RP Certification    RP tests are mostly working.     There is a requirement that the User-Agent and RP client must on the same machine to work properly.    This dependency allows logs for discovery, registration, authentication, token retrieval, and userinfo to be correlated into a single    log file.    This dependency may show that an RP  has passed RP certification but not actual deployment scenarios.    This issue requires further discussion.


Future Events    EventBrite pages for the following events are up :      IIW workshop - http://www.eventbrite.com/e/openid-foundation-workshop-before-fall-2015-iiw-meeting-tickets-17960843366?aff=es2
    OpenID Summit Tokyo 2015 (not fully up yet) -  http://www.eventbrite.com/e/openid-summit-tokyo-2015-tickets-18111127871
  

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20150818/c13ecdc5/attachment.html>