[Openid-specs-ab] Issue #1197: Formulate response to WebID / IsLoggedIn proposals (openid/connect)

gffletch issues-reply at bitbucket.org
Thu Oct 22 14:45:31 UTC 2020


New issue 1197: Formulate response to WebID / IsLoggedIn proposals
https://bitbucket.org/openid/connect/issues/1197/formulate-response-to-webid-isloggedin

gffletch:

Google’s WebID [proposal](https://github.com/WICG/WebID) is looking to tacking 4 core “issues” for users leveraging browsers to navigate the web:

1. Block/separate advertising bounce tracking from identity federation flows
2. Prevent RP collusion leveraging globally correlateable identifiers shared by the IDP
3. Prevent IDPs knowing where the user is logging in before the user actually authenticates
4. Separate Authentication flows from authorization flows as many web use cases just require authentication

Apple’s IsLoggedIn [proposal](https://github.com/privacycg/is-logged-in) is looking to enable the browser to intermediate identity flows and manage a bit for whether the user is logged in.




More information about the Openid-specs-ab mailing list