<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Agreed, Torsten, we would like to see a solution to the problem as well.<div class=""><br class=""></div><div class="">I believe that the “OpenID Session Management 1.0” specification suffers from the same problem, </div><div class="">but I have personally not worked with this specification.</div><div class=""><br class=""></div><div class="">Mike - could we please add this issue to the next AB call agenda?</div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">prateek</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Aug 29, 2016, at 8:48 AM, <a href="mailto:torsten@lodderstedt.net" class="">torsten@lodderstedt.net</a> wrote:</div><br class="Apple-interchange-newline"><div class=""><p dir="ltr" class="">Hi Pratek,</p><p dir="ltr" class="">we are facing the same problem. Describing it in the spec is definitely the minimum. Better would be to come up with a viable solution.</p><p dir="ltr" class="">best regards,<br class="">
Torsten. </p><p dir="ltr" class="">Sent by <a href="http://www.mail-wise.com/installation/2" class="">MailWise</a> – See your emails as clean, short chats.</p>
<br class=""><br class="">-------- Ursprüngliche Nachricht --------<br class="">Von: Prateek Mishra via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" class="">openid-specs-ab@lists.openid.net</a>><br class="">Gesendet: Friday, August 26, 2016 02:56 AM<br class="">An: <a href="mailto:openid-specs-ab@lists.openid.net" class="">openid-specs-ab@lists.openid.net</a><br class="">Betreff: [Openid-specs-ab] Third-Party Cookies and Front Channel Logout<br class=""><br class=""><font face="Verdana" class="">The OIDC Front Channel Logout draft specification uses<span style="orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class=""> HTTP GETs to RP URLs that clear login state.</span></font><div class=""><span style="orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class=""><font face="Verdana" class=""><br class=""></font></span></div><div class=""><a href="http://openid.net/specs/openid-connect-frontchannel-1_0.html" class=""><font face="Verdana" class="">http://openid.net/specs/openid-connect-frontchannel-1_0.html</font></a></div><div class=""><font face="Verdana" class=""><br class=""></font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class="">This typically takes the form of an OP loading a page with <tt style="color: rgb(0, 51, 102); orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class=""><iframe src="frontchannel_logout_uri”></tt><span style="orphans: 2; widows: 2; background-color: rgb(255, 255, 255);" class=""> or <img src=“</span>front_channel_logout_uri”></font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class=""><br class=""></font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class="">However, modern browsers allow users to “block third party cookies” and this setting means that the logout at the RP will fail (unable to remove previously</font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class="">established RP cookie). Our implementation and test teams have found this to be a really confusing situation for end-users.</font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class=""><br class=""></font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class="">Have implementors had any success with alternatives or work-arounds? At a minimum we should capture this behavior in the draft specification.</font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class=""><br class=""></font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class="">Thanks,</font></div><div style="orphans: 2; widows: 2;" class=""><font face="Verdana" class="">prateek</font></div><div style="orphans: 2; widows: 2;" class=""><font face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><br class=""></font></div><div style="orphans: 2; widows: 2;" class=""><font face="verdana, charcoal, helvetica, arial, sans-serif" size="2" class=""><br class=""></font></div></div></blockquote></div><br class=""></div></body></html>