<div dir="ltr">Got in touch with Naveen over hangout chat and he said he is going to complete the review today, so it seems it is progressing. </div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-06-17 8:28 GMT+09:00 Mike Jones <span dir="ltr"><<a href="mailto:Michael.Jones@microsoft.com" target="_blank">Michael.Jones@microsoft.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Spec call notes 16-Jun-14<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Mike Jones<u></u><u></u></p>
<p class="MsoNormal">Edmund Jay<u></u><u></u></p>
<p class="MsoNormal">John Bradley<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Agenda:<u></u><u></u></p>
<p class="MsoNormal"> Third-Party-Initiated login<u></u><u></u></p>
<p class="MsoNormal"> Interop Work<u></u><u></u></p>
<p class="MsoNormal"> OpenID 2.0 Transition Spec<u></u><u></u></p>
<p class="MsoNormal"> Upcoming Events<u></u><u></u></p>
<p class="MsoNormal"> Open Issues<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Third-Party-Initiated login<u></u><u></u></p>
<p class="MsoNormal"> Without safeguards, target_link_uri could become an open redirector<u></u><u></u></p>
<p class="MsoNormal"> Sending links in "state" without safeguards can have the same problem<u></u><u></u></p>
<p class="MsoNormal"> We should not redirect in the error case<u></u><u></u></p>
<p class="MsoNormal"> The initiator is asking the RP to redirect to another RP page<u></u><u></u></p>
<p class="MsoNormal"> Thus, the RP can apply its own logic about whether the target_link_uri page makes sense<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Interop Work<u></u><u></u></p>
<p class="MsoNormal"> Mike added another 9 interop feature tests<u></u><u></u></p>
<p class="MsoNormal"> See the thread "8 new interop feature tests added" on the interop list<u></u><u></u></p>
<p class="MsoNormal"> Mostly about using the "request_uri" and "request" parameters<u></u><u></u></p>
<p class="MsoNormal"> Also for additional algorithm coverage<u></u><u></u></p>
<p class="MsoNormal"> Mike is having ongoing conversations with Roland about next steps<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">OpenID 2.0 Transition Spec<u></u><u></u></p>
<p class="MsoNormal"> Naveen Agarwal has promised to review this spec but it hasn't happened yet<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Upcoming Events<u></u><u></u></p>
<p class="MsoNormal"> IETF 90 Toronto OpenID event, Sunday, July 20th
<u></u><u></u></p>
<p class="MsoNormal"> The request is in. We don't have confirmation of the room yet.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> Cloud Identity Summit interop<u></u><u></u></p>
<p class="MsoNormal"> John, Hans, and Roland will try to get people to go through the existing OpenID Connect interop tests<u></u><u></u></p>
<p class="MsoNormal"> Results will be reported out<u></u><u></u></p>
<p class="MsoNormal"> There will also be demonstrations<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> We should be targeting developer-focused events to promote OpenID Connect at this point<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Open Issues<u></u><u></u></p>
<p class="MsoNormal"> There are no new issues<u></u><u></u></p>
</div>
</div>
<br>_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Nat Sakimura (=nat)<div>Chairman, OpenID Foundation<br><a href="http://nat.sakimura.org/" target="_blank">http://nat.sakimura.org/</a><br>@_nat_en</div>
</div>