<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoPlainText">You're welcome. Hopefully having the "<a href="http://openid.net/wg/about/">How do working groups work?</a>" doc will help everyone work together better.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Designing large-scale federation solutions using OpenID Connect requires contributions from both federation and Connect experts. It's my observation that the work is already benefitting from the attention of both communities of experts
(which do have significant overlap).<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">For instance, NORDUnet held a workshop last year in Copenhagen, chaired by Leif Johansson, on federation using OpenID Connect, at which the design decisions in the current specification were thoroughly discussed. See the Friday workshop
at <a href="https://events.nordu.net/display/NTW2017/Programme">https://events.nordu.net/display/NTW2017/Programme</a>. Participants included Andreas Solberg (who presented his related proposal), people from NORDUnet, SWAMID, WAIF, GEANT, SURFnet, GAR, GRNet,
and others, including Roland and myself. Their contributions were covered by the
<a href="https://openid.net/wordpress-content/uploads/2016/04/OIDF_Note_Well.pdf">
OpenID Note Well</a>. Indeed, many of the changes between <a href="https://openid.net/specs/openid-connect-federation-1_0-03.html">
draft -03</a> and <a href="https://openid.net/specs/openid-connect-federation-1_0-04.html">
draft -04</a> were a result of feedback from this set of federation experts. There have been other meetings of federation experts over the past year also devoted to this topic. If any of you are interested in participating in similar workshops in the future,
I’ll make sure that they are announced on the OpenID Connect mailing list.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Yes, a different working group could have been formed for this work, but we made a conscious decision to keep Connect experts involved by doing it the Connect working group, while also deliberately seeking input from federation experts
worldwide. (I’ll note that a number of them have joined the Connect working group and the OpenID Foundation to participate in this work.) I believe that the work is well-known among the relevant communities of experts and is receiving appropriate attention
from all them – thanks especially to Roland’s outreach efforts.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I’ll close by also thanking Andreas for bringing his proposal to the attention of the working group. It has a lot of thought put into it and I encourage people to read it and consider the design choices described in it.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"> Best wishes,<o:p></o:p></p>
<p class="MsoPlainText"> -- Mike<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<br>
From: Openid-specs-ab <openid-specs-ab-bounces@lists.openid.net> On Behalf Of Mike Schwartz via Openid-specs-ab<br>
Sent: Saturday, July 28, 2018 6:55 AM<br>
To: openid-specs-ab@lists.openid.net<br>
Cc: openid-specs-ab-request@lists.openid.net<br>
Subject: [Openid-specs-ab] What is a contributor?</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Mike J,<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Thanks for putting this together. It does make the process easier to find. I think further clarification is needed, but I'll just nit-pick one issue for now to keep the scope of this discussion short.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">"Consensus should reflect the opinion of a majority of Contributors"<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Here is one of my main objections regarding the federation spec: How are contributors defined?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Perhaps you are defining contributors as the whole Connect WG. I would define contributors to the Federation spec much more narrowly.
<o:p></o:p></p>
<p class="MsoPlainText">Federation is a niche interest. To many of the corporate and consumer WG participants, this is not an important use case. So the idea that you could define a large group of contributors leads to the potential for a niche issue to be
pushed through without the the proper governance and oversight--you could say that someone's silence is assent, when it really just means they don't care.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I think it would have been prudent to form a sub-WG of interested parties, and define that sub-group as the Contributors.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">If we had done this for the federation spec, it would also have been more respectful of people's time, and we could have recruited a wider group of qualified people, enabling us to have a real discussion on the topic.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">There are certainly many qualified people who could have helped. Andreas Solberg just proposed his own federation design--he obviously has some thoughts on this topic. Maybe we could have convinced Leif, Rainer, Keith, Judith, GTRI and
others with deep knowledge of federation to participate. UK Open Banking might be the first federation due to their adoption of Connect, and their de facto position as a central authority that vets participants. We could have asked for their help. Had that
happened, and a real discussion ensued of the design, I would have certainly been willing to accept the draft moving forward as a recommendation for implementation.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">- Mike<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">------------------------<o:p></o:p></p>
<p class="MsoPlainText">Michael Schwartz<o:p></o:p></p>
<p class="MsoPlainText">Gluu<o:p></o:p></p>
<p class="MsoPlainText">Founder / CEO<o:p></o:p></p>
<p class="MsoPlainText"><a href="mailto:mike@gluu.org"><span style="color:windowtext;text-decoration:none">mike@gluu.org</span></a><o:p></o:p></p>
<p class="MsoPlainText"><a href="https://www.linkedin.com/in/nynymike/"><span style="color:windowtext;text-decoration:none">https://www.linkedin.com/in/nynymike/</span></a><o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">On 2018-07-28 07:00, <a href="mailto:openid-specs-ab-request@lists.openid.net">
<span style="color:windowtext;text-decoration:none">openid-specs-ab-request@lists.openid.net</span></a> wrote:<o:p></o:p></p>
<p class="MsoPlainText">> Send Openid-specs-ab mailing list submissions to<o:p></o:p></p>
<p class="MsoPlainText">> <a href="mailto:openid-specs-ab@lists.openid.net">
<span style="color:windowtext;text-decoration:none">openid-specs-ab@lists.openid.net</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> To subscribe or unsubscribe via the World Wide Web, visit<o:p></o:p></p>
<p class="MsoPlainText">> <a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab">
<span style="color:windowtext;text-decoration:none">http://lists.openid.net/mailman/listinfo/openid-specs-ab</span></a><o:p></o:p></p>
<p class="MsoPlainText">> or, via email, send a message with subject or body 'help' to<o:p></o:p></p>
<p class="MsoPlainText">> <a href="mailto:openid-specs-ab-request@lists.openid.net">
<span style="color:windowtext;text-decoration:none">openid-specs-ab-request@lists.openid.net</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> You can reach the person managing the list at<o:p></o:p></p>
<p class="MsoPlainText">> <a href="mailto:openid-specs-ab-owner@lists.openid.net">
<span style="color:windowtext;text-decoration:none">openid-specs-ab-owner@lists.openid.net</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> When replying, please edit your Subject line so it is more specific
<o:p></o:p></p>
<p class="MsoPlainText">> than "Re: Contents of Openid-specs-ab digest..."<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Today's Topics:<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> 1. Re: Reform OpenID Connect (Mike Jones)<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> ----------------------------------------------------------------------<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Message: 1<o:p></o:p></p>
<p class="MsoPlainText">> Date: Fri, 27 Jul 2018 23:44:04 +0000<o:p></o:p></p>
<p class="MsoPlainText">> From: Mike Jones <<a href="mailto:Michael.Jones@microsoft.com"><span style="color:windowtext;text-decoration:none">Michael.Jones@microsoft.com</span></a>><o:p></o:p></p>
<p class="MsoPlainText">> To: "<a href="mailto:openid-specs-ab@lists.openid.net"><span style="color:windowtext;text-decoration:none">openid-specs-ab@lists.openid.net</span></a>"<o:p></o:p></p>
<p class="MsoPlainText">> <<a href="mailto:openid-specs-ab@lists.openid.net"><span style="color:windowtext;text-decoration:none">openid-specs-ab@lists.openid.net</span></a>><o:p></o:p></p>
<p class="MsoPlainText">> Cc: Don Thibeau <<a href="mailto:don@oidf.org"><span style="color:windowtext;text-decoration:none">don@oidf.org</span></a>><o:p></o:p></p>
<p class="MsoPlainText">> Subject: Re: [Openid-specs-ab] Reform OpenID Connect<o:p></o:p></p>
<p class="MsoPlainText">> Message-ID:<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <SN6PR00MB03013327F1C0B50F64721688F52A0@SN6PR00MB0301.namprd00.prod.ou<o:p></o:p></p>
<p class="MsoPlainText">> tlook.com><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Content-Type: text/plain; charset="us-ascii"<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> I've written the promised "How do working groups work"? page
<o:p></o:p></p>
<p class="MsoPlainText">> <a href="http://openid.net/wg/about/"><span style="color:windowtext;text-decoration:none">http://openid.net/wg/about/</span></a> - as announced at
<o:p></o:p></p>
<p class="MsoPlainText">> <a href="http://openid.net/2018/07/27/how-do-working-groups-work/">
<span style="color:windowtext;text-decoration:none">http://openid.net/2018/07/27/how-do-working-groups-work/</span></a> and
<o:p></o:p></p>
<p class="MsoPlainText">> <a href="https://twitter.com/openid/status/1022986802754289665">
<span style="color:windowtext;text-decoration:none">https://twitter.com/openid/status/1022986802754289665</span></a>. Thanks to Nat
<o:p></o:p></p>
<p class="MsoPlainText">> Sakimura, Adam Dawes, Carla Roncato, and Don Thibeau for their
<o:p></o:p></p>
<p class="MsoPlainText">> contributions to the content. Hopefully this FAQ will be useful to
<o:p></o:p></p>
<p class="MsoPlainText">> working group participants new and old and help people most
<o:p></o:p></p>
<p class="MsoPlainText">> effectively participate in the OpenID working group processes.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Best wishes,<o:p></o:p></p>
<p class="MsoPlainText">> -- Mike<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> -----Original Message-----<o:p></o:p></p>
<p class="MsoPlainText">> From: Openid-specs-ab <<a href="mailto:openid-specs-ab-bounces@lists.openid.net"><span style="color:windowtext;text-decoration:none">openid-specs-ab-bounces@lists.openid.net</span></a>> On
<o:p></o:p></p>
<p class="MsoPlainText">> Behalf Of Mike Jones via Openid-specs-ab<o:p></o:p></p>
<p class="MsoPlainText">> Sent: Thursday, July 26, 2018 12:24 PM<o:p></o:p></p>
<p class="MsoPlainText">> To: Mike Schwartz <<a href="mailto:mike@gluu.org"><span style="color:windowtext;text-decoration:none">mike@gluu.org</span></a>><o:p></o:p></p>
<p class="MsoPlainText">> Cc: <a href="mailto:openid-specs-ab@lists.openid.net"><span style="color:windowtext;text-decoration:none">openid-specs-ab@lists.openid.net</span></a>; Don Thibeau <<a href="mailto:don@oidf.org"><span style="color:windowtext;text-decoration:none">don@oidf.org</span></a>><o:p></o:p></p>
<p class="MsoPlainText">> Subject: Re: [Openid-specs-ab] Reform OpenID Connect<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> What is discussed at the working group meetings is up to those who
<o:p></o:p></p>
<p class="MsoPlainText">> show up. What's been said about the Federation spec at the meetings
<o:p></o:p></p>
<p class="MsoPlainText">> is mostly that it appears to be on track, based on feedback from
<o:p></o:p></p>
<p class="MsoPlainText">> large-scale federation experts and early implementers. If you have a
<o:p></o:p></p>
<p class="MsoPlainText">> different viewpoint and want to advocate specific changes, you could
<o:p></o:p></p>
<p class="MsoPlainText">> show up and we'll have a discussion about that.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> But complaining about process now when you haven't attended working
<o:p></o:p></p>
<p class="MsoPlainText">> group discussions to express your viewpoint seems a bit
<o:p></o:p></p>
<p class="MsoPlainText">> counterproductive.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> -- Mike<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> -----Original Message-----<o:p></o:p></p>
<p class="MsoPlainText">> From: Mike Schwartz <<a href="mailto:mike@gluu.org"><span style="color:windowtext;text-decoration:none">mike@gluu.org</span></a>><o:p></o:p></p>
<p class="MsoPlainText">> Sent: Thursday, July 26, 2018 12:15 PM<o:p></o:p></p>
<p class="MsoPlainText">> To: Mike Jones <<a href="mailto:Michael.Jones@microsoft.com"><span style="color:windowtext;text-decoration:none">Michael.Jones@microsoft.com</span></a>><o:p></o:p></p>
<p class="MsoPlainText">> Cc: <a href="mailto:openid-specs-ab@lists.openid.net"><span style="color:windowtext;text-decoration:none">openid-specs-ab@lists.openid.net</span></a>; Don Thibeau <<a href="mailto:don@oidf.org"><span style="color:windowtext;text-decoration:none">don@oidf.org</span></a>><o:p></o:p></p>
<p class="MsoPlainText">> Subject: Re: [Openid-specs-ab] Reform OpenID Connect<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Mike J,<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> According to the minutes, not much time is devoted to the federation
<o:p></o:p></p>
<p class="MsoPlainText">> topic at the meetings and on the calls. When I pointed this out in my
<o:p></o:p></p>
<p class="MsoPlainText">> email to the board, on 7/17, you inferred that this is <o:p>
</o:p></p>
<p class="MsoPlainText">> normal--discussion happened on the mailing list:<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> On 2018-07-17 10:32, Mike Jones wrote:<o:p></o:p></p>
<p class="MsoPlainText">>> Substantive discussion happened on the mailing list<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Now it seems like we're switching back to the meetings (and calls I
<o:p></o:p></p>
<p class="MsoPlainText">> guess).<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> At a higher level, the clear lack of consensus on the federation spec
<o:p></o:p></p>
<p class="MsoPlainText">> that existed before the vote is a red flag that the process is broken,
<o:p></o:p></p>
<p class="MsoPlainText">> and needs reform.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> As Don says in his blog: "Vote early and often":<o:p></o:p></p>
<p class="MsoPlainText">> <a href="http://www.donthibeau.com/vote-early-and-often/">
<span style="color:windowtext;text-decoration:none">http://www.donthibeau.com/vote-early-and-often/</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Let's make that a reality.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> - Mike S<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> -----------------------<o:p></o:p></p>
<p class="MsoPlainText">> Michael Schwartz<o:p></o:p></p>
<p class="MsoPlainText">> Gluu<o:p></o:p></p>
<p class="MsoPlainText">> Founder / CEO<o:p></o:p></p>
<p class="MsoPlainText">> <a href="mailto:mike@gluu.org"><span style="color:windowtext;text-decoration:none">mike@gluu.org</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <a href="https://www.linkedin.com/in/nynymike/"><span style="color:windowtext;text-decoration:none">https://www.linkedin.com/in/nynymike/</span></a><o:p></o:p></p>
<p class="MsoPlainText">> _______________________________________________<o:p></o:p></p>
<p class="MsoPlainText">> Openid-specs-ab mailing list<o:p></o:p></p>
<p class="MsoPlainText">> <a href="mailto:Openid-specs-ab@lists.openid.net"><span style="color:windowtext;text-decoration:none">Openid-specs-ab@lists.openid.net</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab">
<span style="color:windowtext;text-decoration:none">http://lists.openid.net/mailman/listinfo/openid-specs-ab</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> ------------------------------<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> Subject: Digest Footer<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> _______________________________________________<o:p></o:p></p>
<p class="MsoPlainText">> Openid-specs-ab mailing list<o:p></o:p></p>
<p class="MsoPlainText">> <a href="mailto:Openid-specs-ab@lists.openid.net"><span style="color:windowtext;text-decoration:none">Openid-specs-ab@lists.openid.net</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab">
<span style="color:windowtext;text-decoration:none">http://lists.openid.net/mailman/listinfo/openid-specs-ab</span></a><o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> ------------------------------<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> End of Openid-specs-ab Digest, Vol 391, Issue 12<o:p></o:p></p>
<p class="MsoPlainText">> ************************************************<o:p></o:p></p>
<p class="MsoPlainText">_______________________________________________<o:p></o:p></p>
<p class="MsoPlainText">Openid-specs-ab mailing list<o:p></o:p></p>
<p class="MsoPlainText"><a href="mailto:Openid-specs-ab@lists.openid.net"><span style="color:windowtext;text-decoration:none">Openid-specs-ab@lists.openid.net</span></a><o:p></o:p></p>
<p class="MsoPlainText"><a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab"><span style="color:windowtext;text-decoration:none">http://lists.openid.net/mailman/listinfo/openid-specs-ab</span></a><o:p></o:p></p>
</div>
</body>
</html>