<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Spec call notes 19-Jan-15<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Mike Jones<o:p></o:p></p>
<p class="MsoNormal">Nat Sakimura<o:p></o:p></p>
<p class="MsoNormal">John Bradley<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Agenda<o:p></o:p></p>
<p class="MsoNormal"> Call Times<o:p></o:p></p>
<p class="MsoNormal"> Certification<o:p></o:p></p>
<p class="MsoNormal"> OpenID 2.0 Migration<o:p></o:p></p>
<p class="MsoNormal"> Delegation<o:p></o:p></p>
<p class="MsoNormal"> OAuth SPOP<o:p></o:p></p>
<p class="MsoNormal"> Session Management<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Call Times<o:p></o:p></p>
<p class="MsoNormal"> Are people interested in having a second Thursday call every month, at least between now and the Certification launch?<o:p></o:p></p>
<p class="MsoNormal"> We would do it on the third Thursday of the month<o:p></o:p></p>
<p class="MsoNormal"> Let's have one this month on the 22nd and see what the attendance is like<o:p></o:p></p>
<p class="MsoNormal"> https://www3.gotomeeting.com/join/181372694<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Certification<o:p></o:p></p>
<p class="MsoNormal"> Microsoft did a fairly comprehensive test pass on Friday for several configurations<o:p></o:p></p>
<p class="MsoNormal"> Mike sent test issues that were found to Roland, some of which he's already fixed<o:p></o:p></p>
<p class="MsoNormal"> Mike will log issues that Roland hasn't fixed in the issue tracker<o:p></o:p></p>
<p class="MsoNormal"> Nat created an issue tracker for the test tools at https://bitbucket.org/openid/certification/issues<o:p></o:p></p>
<p class="MsoNormal"> Getting other groups engaged in testing now is critical<o:p></o:p></p>
<p class="MsoNormal"> John reported that Ping Identity is starting testing<o:p></o:p></p>
<p class="MsoNormal"> Nat reported that Edmund hasn't started testing yet<o:p></o:p></p>
<p class="MsoNormal"> This should happen this week<o:p></o:p></p>
<p class="MsoNormal"> Mike encouraged Edmund to configure the test endpoint with Roland as soon as possible<o:p></o:p></p>
<p class="MsoNormal"> Mike plans to touch base with Ian at Salesforce and Adam at Google shortly<o:p></o:p></p>
<p class="MsoNormal"> There isn't yet any web page for the certification work<o:p></o:p></p>
<p class="MsoNormal"> It's Mike's goal to get one up by the end of the month, with WG input/help<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">OpenID 2.0 Migration<o:p></o:p></p>
<p class="MsoNormal"> Google will turn off OpenID 2.0 support on April 20th - the first day of RSA<o:p></o:p></p>
<p class="MsoNormal"> There are existing open issues for the migration spec:<o:p></o:p></p>
<p class="MsoNormal"> #962: "NOT FOUND" special value for openid2_id looks dangerous Migration<o:p></o:p></p>
<p class="MsoNormal"> Nat will apply this fix<o:p></o:p></p>
<p class="MsoNormal"> #963: openid2 scope should be ignored if not supported<o:p></o:p></p>
<p class="MsoNormal"> Nat will apply this fix<o:p></o:p></p>
<p class="MsoNormal"> After these are fixed and reviewed, we should take this spec final<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Delegation<o:p></o:p></p>
<p class="MsoNormal"> There was a question about delegation on stackoverflow<o:p></o:p></p>
<p class="MsoNormal"> http://stackoverflow.com/questions/27945031/openid-connect-delegation-with-google-now-that-they-are-deprecating-their-openid<o:p></o:p></p>
<p class="MsoNormal"> The short answer is that we don't have a delegation feature proper in the protocol<o:p></o:p></p>
<p class="MsoNormal"> People could use personal domains as the user input identifier for WebFinger discovery<o:p></o:p></p>
<p class="MsoNormal"> But this doesn't have the same properties as OpenID 2.0 delegation<o:p></o:p></p>
<p class="MsoNormal"> Nat already wrote a response there. Others are encouraged to chime in if they have things to add.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">OAuth SPOP<o:p></o:p></p>
<p class="MsoNormal"> Native applications plans to use OAuth SPOP<o:p></o:p></p>
<p class="MsoNormal"> There are 8 open issues<o:p></o:p></p>
<p class="MsoNormal"> Mike asked if there's going to be a new name for it<o:p></o:p></p>
<p class="MsoNormal"> John came up with a new name with Hannes: Proof Key for Code Exchange<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Session Management<o:p></o:p></p>
<p class="MsoNormal"> Work on session management has taken a back seat to certification for the time being<o:p></o:p></p>
</div>
</body>
</html>