[Openid-specs-ab] Notes from OpenID Session before IETF 84

Mike Jones Michael.Jones at microsoft.com
Mon Nov 5 16:37:27 UTC 2012


Leif Johansson took the following notes.  (Thanks, Leif!)

The OpenID Connect presentation that I gave is attached.

Thanks to all who participated!

                                                            -- Mike

From: Leif Johansson <leifj at sunet.se<mailto:leifj at sunet.se>>
Subject: openidc notes
Date: 4 November, 2012 4:09:46 PM EST

Mike Jones - mbj at microsoft.com<mailto:mbj at microsoft.com>
John Bradley - ve7jtb at ve7jtb.com<mailto:ve7jtb at ve7jtb.com>
Karen O'Donoghue - odonogue at isoc.com<mailto:odonogue at isoc.com>
Milan Sova - sova at cesnet.cz<mailto:sova at cesnet.cz>
Lucy Lynch - lynch at isoc.org<mailto:lynch at isoc.org>
Thorsten Lodderstedt - torsten at lodderstedt.net<mailto:torsten at lodderstedt.net>
Nak Sakimura - sakimura at gmail.com<mailto:sakimura at gmail.com>
Sanhong An - KAIST
Hayashi Totsuyu hayashi at lepidum.co.jp<mailto:hayashi at lepidum.co.jp>
Boku Kihara - bkihara.4 at gmail.com<mailto:bkihara.4 at gmail.com>
Kazuki Shimiza - shimizu at lepidum.c.jp<mailto:shimizu at lepidum.c.jp>
Justin Ritcher - jricher at mitre.org<mailto:jricher at mitre.org>
Amanda Anganes - aanganes at mitre.org<mailto:aanganes at mitre.org>
Richard Barnes - rbarnes at bbn.com<mailto:rbarnes at bbn.com>

- Nat displays OIDF IPR Note Well
- Mike gives OpenID Connect Update
   - some question from the audience on the test-methodology
   - some questions from TL on the ID token
   - discussion on the use of claims requests
   - discussion on standard vs basic profiles (TL+MJ)
   - discussion on googles proposal for using refresh-tokens for
getting id-tokens
   - discussion on privacy issues
   - discussion on IETF-related activities
- break
- Justin updates on state of UMA and dynamic registration work
- Account chooser introduction and overview by JB
   - questions from Leif on how to join the WG
   - Nat explains the way to join the list and the WG
   - Leif asks about filtering and LoA for IdPs
   - Discussion on fallback for non-HTML5
   - Discussion on implicit consent (MS+LL+JB+NS)
       - Nat proposed a privacy-leaking attack using implicit consent
whereby an RP can
       get the user to disclose identifier-mapping information
- backplane intro by JB
   - backplanex.com<http://backplanex.com>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20121105/eb2469a5/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenID_Connect_Update_November_4_2012.pptx
Type: application/vnd.openxmlformats-officedocument.presentationml.presentation
Size: 361763 bytes
Desc: OpenID_Connect_Update_November_4_2012.pptx
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20121105/eb2469a5/attachment-0001.pptx>


More information about the Openid-specs-ab mailing list