<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Spec Call Notes 16-May-22<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Mike Jones<o:p></o:p></p>
<p class="MsoNormal">Vittorio Bertocci<o:p></o:p></p>
<p class="MsoNormal">Monty Wiseman<o:p></o:p></p>
<p class="MsoNormal">Tony Nadalin<o:p></o:p></p>
<p class="MsoNormal">Edmund Jay<o:p></o:p></p>
<p class="MsoNormal">David Waite (DW)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Whitepaper<o:p></o:p></p>
<p class="MsoNormal"> We published V1 of the OpenID for Verifiable Credentials Whitepaper<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://openid.net/2022/05/12/openid-for-verifiable-credentials-whitepaper/">
https://openid.net/2022/05/12/openid-for-verifiable-credentials-whitepaper/</a><o:p></o:p></p>
<p class="MsoNormal"> It was a big hit during EIC<o:p></o:p></p>
<p class="MsoNormal"> Thanks to all who contributed!<o:p></o:p></p>
<p class="MsoNormal"> Vittorio said that it was well received<o:p></o:p></p>
<p class="MsoNormal"> He said we still need work on the use cases for the next version<o:p></o:p></p>
<p class="MsoNormal"> He said we need to better define why & when to use these flows rather than more traditional methods<o:p></o:p></p>
<p class="MsoNormal"> Tony said that at least one person advocated DIDcomm instead in a side conversation<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Logout Issues<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/issues?status=new&status=open&component=Logout">
https://bitbucket.org/openid/connect/issues?status=new&status=open&component=Logout</a><o:p></o:p></p>
<p class="MsoNormal"> 1492: RP-Initiated Logout specification and the back channel<o:p></o:p></p>
<p class="MsoNormal"> Vittorio said a back-channel flavor could be based on SSE<o:p></o:p></p>
<p class="MsoNormal"> Vittorio doesn't know what the carrot would be for the providers to support a back-channel rp-initiated logout<o:p></o:p></p>
<p class="MsoNormal"> Because this would be a different spec, we agreed to close this issue<o:p></o:p></p>
<p class="MsoNormal"> 1491: Do we want to communicate details of why a back-channel logout failed?<o:p></o:p></p>
<p class="MsoNormal"> Vittorio thought that having "error" and "error_description" would be useful to developers<o:p></o:p></p>
<p class="MsoNormal"> But he also said that different error codes could leak information<o:p></o:p></p>
<p class="MsoNormal"> Mike asked whether they should be mandatory or optional<o:p></o:p></p>
<p class="MsoNormal"> Vittorio thought they should be optional<o:p></o:p></p>
<p class="MsoNormal"> Mike said that if we do add this, we should define some specific error codes<o:p></o:p></p>
<p class="MsoNormal"> Possibly from the OAuth 2.0 vocabulary<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Small Specifications Status<o:p></o:p></p>
<p class="MsoNormal"> unmet_authentication_requirements Specification<o:p></o:p></p>
<p class="MsoNormal"> Should we do working group review in preparation for Implementer's Draft or Final status?<o:p></o:p></p>
<p class="MsoNormal"> Vittorio said this might be useful for the step-up authentication work<o:p></o:p></p>
<p class="MsoNormal"> prompt=create Specification<o:p></o:p></p>
<p class="MsoNormal"> Is this ready for WGLC or does it need further updates?<o:p></o:p></p>
<p class="MsoNormal"> Native SSO Specification<o:p></o:p></p>
<p class="MsoNormal"> Should we do working group review in preparation for Implementer's Draft or Final status?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Events<o:p></o:p></p>
<p class="MsoNormal"> IIW<o:p></o:p></p>
<p class="MsoNormal"> There were good sessions about SIOP, browsers, FIDO, attestations, credential types, and trust frameworks<o:p></o:p></p>
<p class="MsoNormal"> OSW<o:p></o:p></p>
<p class="MsoNormal"> Dominic Baer let us know that he's switched to Back-channel Logout in his implementations<o:p></o:p></p>
<p class="MsoNormal"> Roland, Andreas, and Mike triaged all the Federation issues<o:p></o:p></p>
<p class="MsoNormal"> They talked to most of the people that filed them in person<o:p></o:p></p>
<p class="MsoNormal"> We made substantial progress that we would not have made if we were not together in person<o:p></o:p></p>
<p class="MsoNormal"> Brian did great sessions on DPoP and JWT<o:p></o:p></p>
<p class="MsoNormal"> Daniel did a session on Advanced Syntax for Claims<o:p></o:p></p>
<p class="MsoNormal"> There were discussions on identity in browsers<o:p></o:p></p>
<p class="MsoNormal"> Kristina and Torsten presented on OpenID for Verifiable Credentials<o:p></o:p></p>
<p class="MsoNormal"> And substantial progress happened on the whitepaper<o:p></o:p></p>
<p class="MsoNormal"> Pieter led a good discussion on cross-device flows<o:p></o:p></p>
<p class="MsoNormal"> Justin described the HTTP Signatures work<o:p></o:p></p>
<p class="MsoNormal"> EIC<o:p></o:p></p>
<p class="MsoNormal"> The OpenID Workshop was well attended<o:p></o:p></p>
<p class="MsoNormal"> The OpenID for Verifiable Credentials presentation and whitepaper were well received<o:p></o:p></p>
<p class="MsoNormal"> There was a lot of discussion of GAIN<o:p></o:p></p>
<p class="MsoNormal"> It was more a demonstration of goodwill than engineering solutions<o:p></o:p></p>
<p class="MsoNormal"> There is a proof-of-concept with code, but that wasn't what was discussed at EIC<o:p></o:p></p>
<p class="MsoNormal"> The Kim Cameron scholarship is an effective and actionable way of honoring Kim that makes a difference<o:p></o:p></p>
<p class="MsoNormal"> Both recipients, Rachelle Sellung and Alen Horvat, were very engaged<o:p></o:p></p>
<p class="MsoNormal"> There will be two more at Identiverse<o:p></o:p></p>
<p class="MsoNormal"> Other organizations have also expressed interest in sponsoring scholarships<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Pull Requests<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/pull-requests/">
https://bitbucket.org/openid/connect/pull-requests/</a><o:p></o:p></p>
<p class="MsoNormal"> We ran out of time to discuss PRs<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Open Issues<o:p></o:p></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/connect/issues?status=new&status=open">
https://bitbucket.org/openid/connect/issues?status=new&status=open</a><o:p></o:p></p>
<p class="MsoNormal"> We ran out of time to discuss issues<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Next Call<o:p></o:p></p>
<p class="MsoNormal"> The next call will the regular call on Thursday, May 19, 2022 at 7am Pacific Time (followed by a SIOP call)<o:p></o:p></p>
</div>
</body>
</html>