<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div>+1 for discussing the issue and mitigations/solutions at IIW</div><blockquote type="cite"><p class="MsoNormal">[Openid-specs-ab] Attacking OpenID Connect 1.0 - Malicious Endpoints Attack<o:p></o:p></p>
<p class="MsoNormal"> This is the subject of open issue #979<o:p></o:p></p>
<p class="MsoNormal"> We can spend time on this during IIW</p></blockquote></body></html>