<div dir="ltr">sorry i missed the meeting. I guess I still have the time wrong. I even checked the open calendar.<div>What time is the meeting in PDT?<br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><span style="background-color:rgb(242,242,242);color:rgba(0,0,0,0.9);font-family:-apple-system,system-ui,system-ui,"Segoe UI",Roboto,"Helvetica Neue","Fira Sans",Ubuntu,Oxygen,"Oxygen Sans",Cantarell,"Droid Sans","Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Lucida Grande",Helvetica,Arial,sans-serif;font-size:14px;white-space:pre-wrap">Be the change you want to see in the world </span>..tom</div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Apr 5, 2021 at 4:50 PM Mike Jones via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US" style="overflow-wrap: break-word;">
<div class="gmail-m_-680500396409525622WordSection1">
<p class="MsoNormal">Spec Call Notes 5-Apr-21<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Nat Sakimura<u></u><u></u></p>
<p class="MsoNormal">Mike Jones<u></u><u></u></p>
<p class="MsoNormal">David Waite<u></u><u></u></p>
<p class="MsoNormal">Vittorio Bertocci<u></u><u></u></p>
<p class="MsoNormal">Jeremie Miller<u></u><u></u></p>
<p class="MsoNormal">Edmund Jay<u></u><u></u></p>
<p class="MsoNormal">Kristina Yasuda<u></u><u></u></p>
<p class="MsoNormal">Tim Cappalli<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Working Group Status Page Updates<u></u><u></u></p>
<p class="MsoNormal"> Mike updated the working group status page<u></u><u></u></p>
<p class="MsoNormal"> <a href="https://openid.net/wg/connect/status/" target="_blank">
https://openid.net/wg/connect/status/</a><u></u><u></u></p>
<p class="MsoNormal"> Newly adopted drafts were added<u></u><u></u></p>
<p class="MsoNormal"> Active working group members were updated<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">OpenID Connect Federation Spec<u></u><u></u></p>
<p class="MsoNormal"> Published draft -14, incorporating feedback from last year's three interop events<u></u><u></u></p>
<p class="MsoNormal"> The spec may be nearing final status<u></u><u></u></p>
<p class="MsoNormal"> People are encouraged to review the spec now<u></u><u></u></p>
<p class="MsoNormal"> Particularly, look at changes in history entries from the last three releases<u></u><u></u></p>
<p class="MsoNormal"> We should discuss the spec status and next steps on the next European-friendly call<u></u><u></u></p>
<p class="MsoNormal"> This will be Thursday, April 8th, 2021 at 7am Pacific Time<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Claims Aggregation Spec<u></u><u></u></p>
<p class="MsoNormal"> Edmund is reviewing the credential provider draft<u></u><u></u></p>
<p class="MsoNormal"> Apparently they're working on down-scoping<u></u><u></u></p>
<p class="MsoNormal"> Both drafts are trying to pass claims from Claims Providers to RPs<u></u><u></u></p>
<p class="MsoNormal"> Nat wants to review the credential provider draft<u></u><u></u></p>
<p class="MsoNormal"> Note that the credential provider draft hasn't yet been contributed to the working group<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Open Issues<u></u><u></u></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/issues?status=new&status=open" target="_blank">
https://bitbucket.org/openid/connect/issues?status=new&status=open</a><u></u><u></u></p>
<p class="MsoNormal"> #1214: Certification: remove requirement for RP to support unsigned jwt<u></u><u></u></p>
<p class="MsoNormal"> To be consistent, we should probably allow RPs to pass with only a warning if they don’t support unsigned ID Tokens<u></u><u></u></p>
<p class="MsoNormal"> #1213: private_key_jwt, client_secret_jwt audience<u></u><u></u></p>
<p class="MsoNormal"> Filip summarized discussions from the 25-Mar-21 call in an issue comment<u></u><u></u></p>
<p class="MsoNormal"> We discussed that it should remain an error if the Token Endpoint value isn't supported<u></u><u></u></p>
<p class="MsoNormal"> and that it should be a warning if the Issuer value isn't supported<u></u><u></u></p>
<p class="MsoNormal"> #1217: Require JAR in SIOP to strongly ID the Relying Party<u></u><u></u></p>
<p class="MsoNormal"> It's not clear what attack this proposal is intended to mitigate<u></u><u></u></p>
<p class="MsoNormal"> Deferred discussion until Tom is on the call<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">SIOP Special Call<u></u><u></u></p>
<p class="MsoNormal"> Kristina reported on discussions from the last SIOP Special Call<u></u><u></u></p>
<p class="MsoNormal"> One topic discussed was how End-Users could select which SIOP to use<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Next Calls<u></u><u></u></p>
<p class="MsoNormal"> The next regular Connect call is on Thursday, April 8th, 2021 at 7am Pacific Time<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" rel="noreferrer" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
</blockquote></div>