<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I think we were perhaps a bit over excited at having the SDK available, and meeting our release goal.<div class=""><br class=""></div><div class="">You are correct about the fine tuning of the language and our need to describe this as a product of the OIDF rather than as a single member.</div><div class=""><br class=""></div><div class="">In conversations this week with the GSMA they are interested in harmonizing the mobile Connect SDK they have developed as there is a large amount of overlap.</div><div class=""><br class=""></div><div class="">As this move ahead I think this will become a truly important open source contribution. </div><div class=""><br class=""></div><div class="">As to RP testing, Paul Meyer form Ping is working on demo apps using the SDK on iOS and Android. </div><div class=""><br class=""></div><div class="">The SDK may not yet constitute a complete RP on its own.</div><div class=""><br class=""></div><div class="">It will be worth seeing how the RP tests can be applied to native apps as part of our testing the tests. </div><div class="">I will encourage him to try a demo app that can be used for the RP test.</div><div class=""><br class=""></div><div class="">John B.</div><div class=""><br class=""></div><div class=""><div><blockquote type="cite" class=""><div class="">On Feb 27, 2016, at 12:53 AM, Mike Jones <<a href="mailto:Michael.Jones@microsoft.com" class="">Michael.Jones@microsoft.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">First, congratulations on this achievement!<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">I’m writing back with my board secretary hat on and adding the marketing committee. Language matters. I’m going to suggest some alternative language to use in future communications about this, because some of the language below could be misinterpreted in a way that leads people to reach false conclusions and negatively impacts the OpenID Foundation and its reputation.<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">In the future, you should probably replace the sentence “</span><span style="font-size: 9.5pt;" class="">The Google Identity team has open sourced </span><a href="http://openid.github.io/AppAuth-Android/" style="color: purple; text-decoration: underline;" class="">AppAuth for Android</a><span style="font-size: 9.5pt;" class=""> under the OpenID Foundation</span><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">” with “</span><span style="font-size: 9.5pt;" class="">The Google Identity team has contributed the open source </span><a href="http://openid.github.io/AppAuth-Android/" style="color: purple; text-decoration: underline;" class="">AppAuth for Android</a><span style="font-size: 9.5pt;" class=""><span class="Apple-converted-space"> </span>code to the OpenID Connect working group</span><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">”. Why? First, because a contribution is always made to specific working group and not to the Foundation as a whole. Second, because the current language could be misinterpreted as implying an endorsement of this implementation by the OpenID Foundation. The Foundation has to be extremely careful not to create an impression that it is favoring implementations by one member over those that are created by others. I’m sure you understand that that is critical to the Foundation’s reputation.<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">Likewise, you need to replace the sentence “</span><span style="font-size: 9.5pt;" class="">We contributed the code to the OIDF under the foundation's new contributor license agreement (CLA)</span><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">” with “</span><span style="font-size: 9.5pt;" class="">We contributed the code to the OpenID Connect Working Group under the OpenID Foundation’s new contributor license agreement (CLA)</span><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">”.<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">Language matters. Thanks for listening and trying to be more clear in future communications so that accurate perceptions are formed, particularly those that might reach a wider audience.<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""> Best wishes,<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""> -- Mike<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class="">P.S. How soon can you run the implementation through the RP certification tests?<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><b class=""><span style="font-size: 10pt; font-family: Tahoma, sans-serif;" class="">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;" class=""><span class="Apple-converted-space"> </span>Openid-specs-ab [<a href="mailto:openid-specs-ab-bounces@lists.openid.net" class="">mailto:openid-specs-ab-bounces@lists.openid.net</a>]<span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>William Denniss<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Friday, February 26, 2016 9:58 AM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab@lists.openid.net" class="">openid-specs-ab@lists.openid.net</a>; Iain McGinniss<br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>[Openid-specs-ab] Announcing AppAuth for Android, a client SDK for OAuth 2.0 and OpenID Connect<o:p class=""></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><o:p class=""> </o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class="">The Google Identity team has open sourced </span><a href="http://openid.github.io/AppAuth-Android/" style="color: purple; text-decoration: underline;" class="">AppAuth for Android</a><span style="font-size: 9.5pt;" class=""> under the OpenID Foundation.</span><o:p class=""></o:p></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><o:p class=""> </o:p></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class="">AppAuth is a client SDK for OAuth and OpenID Connect that follows the <a href="https://tools.ietf.org/html/draft-ietf-oauth-native-apps" target="_blank" style="color: purple; text-decoration: underline;" class="">best practices</a> for doing standards-based auth in apps, including in-built support for <a href="https://tools.ietf.org/html/rfc7636" target="_blank" style="color: purple; text-decoration: underline;" class="">PKCE</a> and performing user interaction in<span class="Apple-converted-space"> </span><a href="http://developer.android.com/tools/support-library/features.html#custom-tabs" style="color: purple; text-decoration: underline;" class="">custom tabs</a><span class="Apple-converted-space"> </span>(a feature of Android supported by<span class="Apple-converted-space"> </span><a href="https://developer.chrome.com/multidevice/android/customtabs" style="color: purple; text-decoration: underline;" class="">Chrome</a>, and open to other browsers).<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class="">You can fork the <a href="https://github.com/openid/AppAuth-Android" target="_blank" style="color: purple; text-decoration: underline;" class="">repository</a> on Github, and reference the<span class="Apple-converted-space"> </span><a href="https://bintray.com/openid/net.openid/appauth/view" style="color: purple; text-decoration: underline;" class="">Maven dependency</a>. Comprehensive <a href="https://openid.github.io/AppAuth-Android/docs/latest/" target="_blank" style="color: purple; text-decoration: underline;" class="">API docs</a> are available.<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class="">I gave a <a href="https://www.youtube.com/watch?v=ppeU8yeI_ks" target="_blank" style="color: purple; text-decoration: underline;" class="">talk</a> at the OpenID Summit Tokyo last year, which outlines some of the motivations behind this effort.<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class="">We contributed the code to the OIDF under the foundation's new contributor license agreement (CLA). If you/your company have signed the CLA, feel free to contribute by sending a pull request. Currently myself and my colleague Iain McGinniss are the maintainers, and will review all incoming pull requests.</span><o:p class=""></o:p></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class="">Thanks to the contributors on my team: Iain McGinniss, Steven Wright, Alex Chau, and Benjamin Franz for their hard work building the library. To Don Thibeau, John Bradley, Adam Dawes and Mike Leszcz for their guidance and help getting the OpenID Foundation setup to accept code contributions, Paul Meyer and John Bradley for interop validation, and Andy Zmolek for advocating this best practice in the Android community.</span><o:p class=""></o:p></div></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class="">Special thanks to Adam Dawes and Eric Sachs for backing the AppAuth effort.<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span style="font-size: 9.5pt;" class=""><o:p class=""> </o:p></span></div></div></div></div><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Openid-specs-ab mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class=""><a href="mailto:Openid-specs-ab@lists.openid.net" class="">Openid-specs-ab@lists.openid.net</a></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class=""><a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" class="">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a></span></div></blockquote></div><br class=""></div></body></html>