<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Spec Call Notes 24-Jan-22<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Mike Jones<o:p></o:p></p>
<p class="MsoNormal">Giuseppe De Marco<o:p></o:p></p>
<p class="MsoNormal">Vittorio Bertocci<o:p></o:p></p>
<p class="MsoNormal">Nat Sakimura<o:p></o:p></p>
<p class="MsoNormal">David Waite<o:p></o:p></p>
<p class="MsoNormal">Giuseppe De Marco<o:p></o:p></p>
<p class="MsoNormal">Kristina Yasuda<o:p></o:p></p>
<p class="MsoNormal">Edmund Jay<o:p></o:p></p>
<p class="MsoNormal">Tom Jones<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Federation Spec<o:p></o:p></p>
<p class="MsoNormal"> Roland merged PR #108 creating separate endpoints for operations<o:p></o:p></p>
<p class="MsoNormal">Federation Issues<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/issues?status=new&status=open&component=Federation">
https://bitbucket.org/openid/connect/issues?status=new&status=open&component=Federation</a><o:p></o:p></p>
<p class="MsoNormal"> #1413: Evaluate Entity Statement releases metadata and not entity statements<o:p></o:p></p>
<p class="MsoNormal"> Giuseppe wants to instead return entity statements with trust marks<o:p></o:p></p>
<p class="MsoNormal"> Trust marks can be used to immediately exclude an entity from a federation<o:p></o:p></p>
<p class="MsoNormal"> #1414: Federation api endpoints with OpenAPI Schema version 3<o:p></o:p></p>
<p class="MsoNormal"> The issue asks "Would you like to have an appendix with a OAS3 schema describing these endpoints?"<o:p></o:p></p>
<p class="MsoNormal"> Mike asked that an example or two be added to the issue<o:p></o:p></p>
<p class="MsoNormal"> #1368: [federation_api] fetch entity statement - issuer paramenter is really required?<o:p></o:p></p>
<p class="MsoNormal"> Giuseppe said that the issuer could be implicit<o:p></o:p></p>
<p class="MsoNormal"> Mike said that, in general, we try to have information be explicitly passed<o:p></o:p></p>
<p class="MsoNormal"> #1366: Support for "immediate" exclusion of an entity from a federation<o:p></o:p></p>
<p class="MsoNormal"> PR #104 addresses this issue<o:p></o:p></p>
<p class="MsoNormal">Federation PRs<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/pull-requests/">
https://bitbucket.org/openid/connect/pull-requests/</a><o:p></o:p></p>
<p class="MsoNormal"> PR #114: feat: Added Metadata and Trust Marks in "1.2. Terminology"<o:p></o:p></p>
<p class="MsoNormal"> Adds terminology<o:p></o:p></p>
<p class="MsoNormal"> PR #112: fix: XML2RFC processing fixed<o:p></o:p></p>
<p class="MsoNormal"> Fixes syntax error<o:p></o:p></p>
<p class="MsoNormal"> PR #111: Evaluate Entity Statement for any subject<o:p></o:p></p>
<p class="MsoNormal"> Defer until Roland reviews it<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> The next European-friendly call time is on Thursday<o:p></o:p></p>
<p class="MsoNormal"> We will try to have Roland and John come<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Editorial Comments on SIOP<o:p></o:p></p>
<p class="MsoNormal"> PR #115: [SIOP v2] reflecting editorial comments received during pre-implementer's draft review period<o:p></o:p></p>
<p class="MsoNormal"> Addresses editorial issues filed<o:p></o:p></p>
<p class="MsoNormal"> Adds definitions<o:p></o:p></p>
<p class="MsoNormal"> Makes no normative changes<o:p></o:p></p>
<p class="MsoNormal"> Reviews are requested<o:p></o:p></p>
<p class="MsoNormal"> We'd like to merge this before the official voting period starts on February 1st<o:p></o:p></p>
<p class="MsoNormal"> We're not going to merge any normative changes until the review period ends<o:p></o:p></p>
<p class="MsoNormal"> We're not aware of any editorial OIDC4VP issues<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">OAuth JKT URI Spec<o:p></o:p></p>
<p class="MsoNormal"> The call for adoption is currently open through Thursday. See:<o:p></o:p></p>
<p class="MsoNormal"> [OAUTH-WG] Call for adoption - JWK Thumbprint URI<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Open Issues<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/issues?status=new&status=open">
https://bitbucket.org/openid/connect/issues?status=new&status=open</a><o:p></o:p></p>
<p class="MsoNormal"> #1395 usage of id_token_hint in OIDC.Core<o:p></o:p></p>
<p class="MsoNormal"> We discussed possibly clarifying the use of the id_token_hint for reauthenticating<o:p></o:p></p>
<p class="MsoNormal"> Vittorio isn't comfortable with reauthenticating<o:p></o:p></p>
<p class="MsoNormal"> Vittorio says that he's ... Kubernetes
<o:p></o:p></p>
<p class="MsoNormal"> Mike said we intentionally don't say what the OP must and must not do when receiving an id_token_hint<o:p></o:p></p>
<p class="MsoNormal"> Vittorio said that he's comfortable using the id_token_hint to provide information<o:p></o:p></p>
<p class="MsoNormal"> He's not comfortable using it as a credential<o:p></o:p></p>
<p class="MsoNormal"> Brian said that if we had sender-constrained ID Tokens with Token Binding, the threat model would be different<o:p></o:p></p>
<p class="MsoNormal"> Vittorio would be OK not making a clarification<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Next Call<o:p></o:p></p>
<p class="MsoNormal"> The next Connect call will be Thursday January 27, 2022 at 7am Pacific Time<o:p></o:p></p>
</div>
</body>
</html>