[Openid-specs-ab] Spec call notes 22-Jan-15

[Mike Jones]

Spec call notes 22-Jan-15

Roland Hedberg
Nat Sakimura
John Bradley
Mike Jones
Justin Richer
Edmund Jay

Agenda
               Certification
               OpenID 2.0 Migration

Certification
               Our issue tracker at https://bitbucket.org/openid/certification/issues is being used
               Nat showed Mike how to add Roland as a user of the repository

               Only the tests relevant to a conformance profile are now shown
                              People can choose which response_type they are testing

               Log files for your tests are available at https://oictest.umdc.umu.se:<port>/log

               There will need to be a document with instructions on what has to be submitted for a certification for each profile
               This is in addition to the document defining the actual profiles
               Mike plans to work on these documents for the openid.net site after he finishes filing bugs
               Nat pointed out that there's a wiki in the repository that we could capture notes in as well

               Roland's person doing the installation on the Symantec machines plans to be done this week

               There are about 30 RP Tests written now
               There's a test OP that can do different things, depending upon the inputs given and path used
                              It can intentionally do things wrong, such as produce bad signatures
                              The OP logs results
               Roland wonders whether we need registration of RPs to gain access to the right set of logs
               Roland expects to have an initial set of tests available within a few days

               We will have more business decisions to make about which tests to require for each profile
                              For instance, do we require prohibiting authorization code reuse or just make it a warning?

               John said that some of the locale tests behave oddly now
                              Roland said that some configuration is needed in those cases that he hasn't done yet
                              John will retest and file a bug if something is still odd

OpenID 2.0 Migration
               Google announced that they will turn off OpenID 2.0 support on April 20th - the first day of RSA
                              John thinks the real date may be in September - John will check with Adam
               We should plan to have the vote to take Migration final before Google turns OpenID 2.0 off
               People should review the spec at http://openid.bitbucket.org/openid-connect-migration-1_0.html now
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20150122/10971cfa/attachment.html>