[Openid-specs-ab] Spec call notes 20-Jul-17

[Mike Jones]

Spec call notes 20-Jul-17

Mike Jones
Brian Campbell
Nat Sakimura
Rich Levinson
John Bradley

Agenda
              Open Issues
              iOS 11 Situation
              Certification
              Upcoming Events
              Next Call

Open Issues
              https://bitbucket.org/openid/connect/issues?status=new&status=open
              Two new issues:
              #1018: Core: Missing "sub" in examples of aggregated and distributed claims
                           Mike will add "sub" values to these examples.
              #1019: Core: IANA Consideration
                           Mike will add registrations for the claims about the authentication. I'm thinking "iss", "aud", "sub", "exp", "iat", "nbf", "jti", and "cnf".

Certification
              We're on the new OP code base
                           A few differences have been found by testers, which have been corrected by Roland and Hans
              Mike will announce that the RP certification pilot phase is ending
              New certifications keep coming in - for instance, from F5 Networks
              We haven't yet started to transition from the Symantec servers
                           Mike wants a number of things that are in flight to finish before we do that

iOS 11 Situation
              John reports that there has been some movement by Apple
              They created a new SFAuthenticationSessioninterface that provides the same functionality as the view controller but that respects Apple's privacy goals
              William Dennis has successfully tested this with AppAuth
              This was captured in William's slides from last week's OAuth Security Workshop

OAuth Security Workshop
              Researchers reported that OpenID Connect is secure within their model

Upcoming Events
              OIDF-J JICS conference, Sep 15
              There is a federation design meeting September 15th in Copenhagen
                           It accompanies https://events.nordu.net/display/NTW2017/Welcome
              OpenID Workshop before IIW at PayPal, Oct 16
              IIW, Oct 17-19 http://www.internetidentityworkshop.com/

Next Call
              The next call is Monday, July 24th at 4pm Pacific Time
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20170720/ed369848/attachment.html>