<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
Additionally, we're leaning toward picking JWK because it's a raw key format as opposed to a certificate format, which has signing authorities and all other manner of overhead that aren't directly used by the protocols under discussion.
<div><br>
</div>
<div> -- Justin</div>
<div><br>
<div>
<div>On Jul 26, 2012, at 6:10 PM, Edmund Jay wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; ">
<div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: tahoma, 'new york', times, serif; font-size: 10pt; ">
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<span>This is in reference to the open issue # 633 at<span class="Apple-converted-space"> </span><a target="_blank" href="http://hg.openid.net/connect/issue/633/messages-42-jwk-and-x509-format-support" style="color: blue; text-decoration: underline; ">http://hg.openid.net/connect/issue/633/messages-42-jwk-and-x509-format-support</a></span><br>
The specs currently support x509 and JWK format for publishing public keys but is silent on which must be supported.<br>
There may be interop problems related to cryptographic aspects of OpenID due to lack of common support between client and server.<br>
<br>
-- Edmund<br>
</div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: tahoma, 'new york', times, serif; font-size: 10pt; ">
<br>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; ">
<font face="Tahoma" size="2">
<hr size="1">
<b><span style="font-weight: bold; ">From:</span></b><span class="Apple-converted-space"> </span>Anthony Nadalin <<a href="mailto:tonynad@microsoft.com">tonynad@microsoft.com</a>><br>
<b><span style="font-weight: bold; ">To:</span></b><span class="Apple-converted-space"> </span>Edmund Jay <<a href="mailto:ejay@mgi1.com">ejay@mgi1.com</a>>; "<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>" <<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>>;
"<a href="mailto:openid-connect-interop@googlegroups.com">openid-connect-interop@googlegroups.com</a>" <<a href="mailto:openid-connect-interop@googlegroups.com">openid-connect-interop@googlegroups.com</a>><br>
<b><span style="font-weight: bold; ">Sent:</span></b><span class="Apple-converted-space"> </span>Thu, July 26, 2012 1:46:41 PM<br>
<b><span style="font-weight: bold; ">Subject:</span></b><span class="Apple-converted-space"> </span>RE: [Openid-specs-ab] Mandatory JWK Support for OpenID Connect<br>
</font><br>
<div class="WordSection1" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: serif; ">
<span style="font-size: 11pt; color: rgb(31, 73, 125); ">Can you provide the rationale or a pointer to the rationale?</span></div>
<p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: serif; ">
<span style="font-size: 11pt; color: rgb(31, 73, 125); "> </span></p>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; border-top-style: solid; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding-top: 3pt; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; ">
<div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: serif; ">
<b><span style="font-size: 10pt; ">From:</span></b><span style="font-size: 10pt; "><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab-bounces@lists.openid.net">openid-specs-ab-bounces@lists.openid.net</a> [mailto:openid-specs-ab-bounces@lists.openid.net]<span class="Apple-converted-space"> </span><b>On
Behalf Of<span class="Apple-converted-space"> </span></b>Edmund Jay<br>
<b>Sent:</b><span class="Apple-converted-space"> </span>Thursday, July 26, 2012 11:58 AM<br>
<b>To:</b><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>;
<a href="mailto:openid-connect-interop@googlegroups.com">openid-connect-interop@googlegroups.com</a><br>
<b>Subject:</b><span class="Apple-converted-space"> </span>[Openid-specs-ab] Mandatory JWK Support for OpenID Connect</span></div>
</div>
</div>
<p class="MsoNormal" style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: serif; ">
</p>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: serif; ">
<span style="font-size: 10pt; color: black; ">This is to inform everyone that the Working Group has decided to make JWK support mandatory for both the client and server.<br>
Feedbacks welcome.<br>
<br>
<br>
-- Edmund</span></div>
</div>
</div>
</div>
</div>
</div>
</div>
</span></blockquote>
</div>
<br>
</div>
</body>
</html>