<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Spec call notes 19-Dec-13<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Nat Sakimura<o:p></o:p></p>
<p class="MsoNormal">Edmund Jay<o:p></o:p></p>
<p class="MsoNormal">Brian Campbell<o:p></o:p></p>
<p class="MsoNormal">Roland Hedberg<o:p></o:p></p>
<p class="MsoNormal">Mike Jones<o:p></o:p></p>
<p class="MsoNormal">John Bradley<o:p></o:p></p>
<p class="MsoNormal">Nov Matake<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Agenda:<o:p></o:p></p>
<p class="MsoNormal"> Open Issues<o:p></o:p></p>
<p class="MsoNormal"> Brian's comments on the list<o:p></o:p></p>
<p class="MsoNormal"> Editing update<o:p></o:p></p>
<p class="MsoNormal"> Reviewing<o:p></o:p></p>
<p class="MsoNormal"> Finishing<o:p></o:p></p>
<p class="MsoNormal"> Next Call<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Open Issues:<o:p></o:p></p>
<p class="MsoNormal"> #913 - Discovery - Protocol relative URLs are allowed?<o:p></o:p></p>
<p class="MsoNormal"> We will close this as won't fix, since it's an edge case<o:p></o:p></p>
<p class="MsoNormal"> #730 - Privacy Considerations<o:p></o:p></p>
<p class="MsoNormal"> Nat will close this. We may have a separate standing privacy document as well in the future.<o:p></o:p></p>
<p class="MsoNormal"> #41 - Discovery Security Considerations<o:p></o:p></p>
<p class="MsoNormal"> John will do this this morning<o:p></o:p></p>
<p class="MsoNormal"> #257 - Acknowledgements<o:p></o:p></p>
<p class="MsoNormal"> Mike will close this later today<o:p></o:p></p>
<p class="MsoNormal"> #879 - Host the site https://self-issued.me/<o:p></o:p></p>
<p class="MsoNormal"> The site is up now<o:p></o:p></p>
<p class="MsoNormal"> #880 - Host the endpoint https://self-issued.me/registration/1.0/<o:p></o:p></p>
<p class="MsoNormal"> John will work with Edmund to get this working
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Brian's comments on the list<o:p></o:p></p>
<p class="MsoNormal"> Registration: client_secret is used for more than token endpoint authentication<o:p></o:p></p>
<p class="MsoNormal"> request_object_encryption_alg and request_object_encryption_enc added<o:p></o:p></p>
<p class="MsoNormal"> Change from "declaring that it will use" to "declaring that it may use"<o:p></o:p></p>
<p class="MsoNormal"> Default is will not -> default is that RP is not declaring its intent to<o:p></o:p></p>
<p class="MsoNormal"> Clarify that RP may use any of the supported encryption algs<o:p></o:p></p>
<p class="MsoNormal"> Delete qualifier about "for the request object"<o:p></o:p></p>
<p class="MsoNormal"> Core: is "dir" an allowed alg for Symmetric Encryption?<o:p></o:p></p>
<p class="MsoNormal"> Changed to enable keys longer than 256 bits<o:p></o:p></p>
<p class="MsoNormal"> Registration: request_uris with fragments?<o:p></o:p></p>
<p class="MsoNormal"> We discussed why the fragment is necessary as to indicate request changes<o:p></o:p></p>
<p class="MsoNormal"> Registration: how does client_secret rotation work?<o:p></o:p></p>
<p class="MsoNormal"> We discussed that we don't specify how to rotate client secrets<o:p></o:p></p>
<p class="MsoNormal"> If we want to do that, this would require another spec<o:p></o:p></p>
<p class="MsoNormal"> We will say that GET is idempotent<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Editing Status:<o:p></o:p></p>
<p class="MsoNormal"> All review comments had been applied as of the third release candidates<o:p></o:p></p>
<p class="MsoNormal"> http://self-issued.info/?p=1152<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Reviewing:<o:p></o:p></p>
<p class="MsoNormal"> People are requested to review the 11 sentences in which "if omitted" occurs in Registration<o:p></o:p></p>
<p class="MsoNormal"> 8 of these are new text<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Finishing:<o:p></o:p></p>
<p class="MsoNormal"> We will start the review period 24 hours from when updates are published unless people raise objections<o:p></o:p></p>
<p class="MsoNormal"> The schedule as currently anticipated is:<o:p></o:p></p>
<p class="MsoNormal"> Thu, Dec 19 - WG consensus to publish proposed final specs and notice to the OIDF Secretary<o:p></o:p></p>
<p class="MsoNormal"> Fri, Dec 29 - Final review period starts and first voting notice made<o:p></o:p></p>
<p class="MsoNormal"> Tue, Feb 4 - Second voting notice and opening of early voting<o:p></o:p></p>
<p class="MsoNormal"> Tue, Feb 18 - Review period ends and vote to approve final specifications officially starts<o:p></o:p></p>
<p class="MsoNormal"> Tue, Feb 25 - Final specifications approved<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Next Call:<o:p></o:p></p>
<p class="MsoNormal"> The next call with be January 6th<o:p></o:p></p>
<p class="MsoNormal"> However, if the specs do not complete as anticipated, we will continue regular calls until they do<o:p></o:p></p>
</div>
</body>
</html>