<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:"MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"\@MS Gothic";
panose-1:2 11 6 9 7 2 5 8 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.old
{mso-style-name:old;}
span.new
{mso-style-name:new;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">It’s your points following “Secondly” that I think we need to capture in the spec and be clear to developers about – not so much the example itself. If you
can suggest language along that line, that should help resolve the potential developer confusion that is the real root of this issue.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> -- Mike<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> n-sakimura [mailto:n-sakimura@nri.co.jp]
<br>
<b>Sent:</b> Wednesday, October 02, 2013 10:34 PM<br>
<b>To:</b> Mike Jones<br>
<b>Cc:</b> openid-specs-ab@lists.openid.net<br>
<b>Subject:</b> Re: [Openid-specs-ab] [Bitbucket] Issue #872: session 4.1. Opbs is unclear and conflict with "session management memo" on wiki (openid/connect)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">First of all, opbs is just a parameter name that I happened to have used in the example. It could have been anything.
<br>
<br>
Sencondly, what is being stored in the OP Browser State completely depends on each OP. It may just be a random variable that the OP relates the server side state and the browser. Alternatively, it may be storing bunch of state related variables which is then
signed or encrypted for the server to be less stateful. <br>
<br>
I do not want to give false impression to the developpers that there is one single way of doing it. The maximum I am willing to do is to add some comments to the example.
<br>
<br>
Nat<br>
<br>
(2013/10/03 9:50), Mike Jones wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">P.S. Nat, if you could provide proposed text giving a few examples of what Opbs might contain and (if we’re not already saying this) what properties this state needs to have, that
would be really useful in helping to close this issue.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> Thanks,<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> -- Mike<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>From:</b>
<a href="mailto:openid-specs-ab-bounces@lists.openid.net">openid-specs-ab-bounces@lists.openid.net</a> [<a href="mailto:openid-specs-ab-bounces@lists.openid.net">mailto:openid-specs-ab-bounces@lists.openid.net</a>]
<b>On Behalf Of </b>Mike Jones<br>
<b>Sent:</b> Wednesday, October 02, 2013 5:47 PM<br>
<b>To:</b> <a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a><br>
<b>Subject:</b> Re: [Openid-specs-ab] [Bitbucket] Issue #872: session 4.1. Opbs is unclear and conflict with "session management memo" on wiki (openid/connect)<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">I strongly disagree with removing the example. I believe it’s the only thing giving implementers a sense of what they need to do to fulfill the requirements.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">We should do what it takes to clarify the example, if needed – not remove it.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> -- Mike<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>From:</b> Nat Sakimura [<a href="mailto:issues-reply@bitbucket.org">mailto:issues-reply@bitbucket.org</a>]
<br>
<b>Sent:</b> Wednesday, October 02, 2013 5:26 PM<br>
<b>To:</b> Mike Jones<br>
<b>Subject:</b> Re: [Bitbucket] Issue #872: session 4.1. Opbs is unclear and conflict with "session management memo" on wiki (openid/connect)<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<div>
<table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td width="32" style="width:19.2pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><o:p></o:p></p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt" id="content">
<table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td colspan="2" style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><strong>Nat Sakimura</strong> commented on issue #872:
<o:p></o:p></p>
</td>
</tr>
<tr>
<td colspan="2" style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><a href="https://bitbucket.org/openid/connect/issue/872/session-41-opbs-is-unclear-and-conflict">session 4.1. Opbs is unclear and conflict with "session management memo" on wiki</a>
</b><o:p></o:p></p>
</td>
</tr>
<tr>
<td colspan="2" style="padding:.75pt .75pt .75pt .75pt">
<p>Did not even needed to follow up with Breno. My intention here is clear. The example is non-normative and is just illustrating what an OP might do to fulfill what the spec. normatively requires. If it is causing more confusion than explaining it, we may
want to drop the example and just go with the normative text.<o:p></o:p></p>
</td>
</tr>
<tr>
<td nowrap="" style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Status:<o:p></o:p></p>
</td>
<td width="100%" style="width:100.0%;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="old"><s>new</s></span>
<span class="new">open</span> <o:p></o:p></p>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://bitbucket.org/openid/connect/issue/872/session-41-opbs-is-unclear-and-conflict">View this issue</a> or add a comment by replying to this email.
<o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
</div>
</td>
</tr>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<table class="MsoNormalTable" border="0" cellspacing="3" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://bitbucket.org/openid/connect/issue/872/unwatch/mbj/6ee343dc8521bd44c690cfa4ae5fe8299cabd061/">Unwatch this issue</a> to stop receiving email updates.
<o:p></o:p></p>
</td>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
<td width="100" style="width:60.0pt;padding:.75pt .75pt .75pt .75pt">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"><o:p></o:p></span></a></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"> <o:p></o:p></span></a></p>
</div>
<p class="MsoNormal"><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"><br>
<br>
<br>
<o:p></o:p></span></a></p>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">_______________________________________________<o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">Openid-specs-ab mailing list<o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"><u><span style="color:blue">Openid-specs-ab@lists.openid.net</span></u><o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"><u><span style="color:blue">http://lists.openid.net/mailman/listinfo/openid-specs-ab</span></u><o:p></o:p></span></a></pre>
</blockquote>
<p class="MsoNormal"><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"><br>
<br>
<br>
<o:p></o:p></span></a></p>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">-- <o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">Nat Sakimura (<u><span style="color:blue">n-sakimura@nri.co.jp</span></u>)<o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">Nomura Research Institute, Ltd. <o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"><u><span style="color:blue">Tel:+81-3-6274-1412</span></u> Fax:+81-3-6274-1547<o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"><o:p> </o:p></span></a></pre>
<pre><span style="font-family:"MS Gothic""><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">本メールに含まれる情報は機密情報であり、宛先に記載されている方のみに送信することを意図しております。意図された受取人以外の方によるこれらの情報の開示、複製、再配布や転送など一切の利用が禁止されています。誤って本メールを受信された場合は、申し訳ござ</span><span style="font-family:"Courier New";color:black;text-decoration:none">ӓ<o:p></o:p></span></a></span></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none"> 6;|<o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">14;</span><span style="font-family:"MS Gothic";color:black;text-decoration:none">せんが、送信者までお知らせいただき、受信されたメールを削除していただきますようお願い致します。</span><span style="color:black;text-decoration:none"><o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">PLEASE READ:<o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">The information contained in this e-mail is confidential and intended for the named recipient(s) only.<o:p></o:p></span></a></pre>
<pre><a href="https://bitbucket.org"><span style="color:black;text-decoration:none">If you are not an intended recipient of this e-mail, you are hereby notified that any review, dissemination, distribution or duplication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete your copy from your system.<o:p></o:p></span></a></pre>
</div>
</body>
</html>