<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:"NeueHaasGroteskDisp Pro";}
@font-face
{font-family:NEUEHAASDISPLAY-MEDIU;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.m3123872580928034833gmail-im
{mso-style-name:m_3123872580928034833gmail-im;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">I’ve asked Mike Leszcz to look into the Zoom issue we encountered yesterday.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Openid-specs-ab <openid-specs-ab-bounces@lists.openid.net>
<b>On Behalf Of </b>Brian Campbell via Openid-specs-ab<br>
<b>Sent:</b> Friday, April 4, 2025 10:10 AM<br>
<b>To:</b> Artifact Binding/Connect Working Group <openid-specs-ab@lists.openid.net><br>
<b>Cc:</b> Brian Campbell <bcampbell@pingidentity.com><br>
<b>Subject:</b> Re: [Openid-specs-ab] Meeting Minutes for April 3rd<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">FWIW my understanding is that the meeting ended abruptly due to the start of a different WG's meeting and how the OIDF zoom account is set up.
<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Fri, Apr 4, 2025 at 11:05<span style="font-family:"Arial",sans-serif"> </span>AM Samuel Rinnetmäki via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="FI" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="FI" style="font-size:11.0pt">Hi,</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="FI" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt">IMHO, the discussion on Thursday’s meeting was great.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt">I think all views were well reasoned and I found it easy to relate with all viewpoints. Everyone was “right” and it’s understandable
that the discussion may end up being a little emotional. (I’m not encouraging ad hominem attacks or unpolite behaviour, but I understand that it’s sometimes hard to keep calm when you deeply care about the subject.)</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt">At the end of the meeting, I raised my hand, but the meeting ended before I got a chance to speak. I would have liked to state that while
I see value in Mike’s wish to keep the same syntax of client identifiers across the specs, having both prefixed and non-prefixed identifiers in OID4VP hurts developer experience more than having identifiers prefixed in OID4VP and non-prefixed in OpenID Federation.
(OpenID Federation doesn’t need prefixes, OID4VP does. If some identifiers are prefixed in a spec, they all should be.)</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt">For that reason, I gave a thumbs-up to Aaron’s proposal scribed by Kristina in the issue 401 of the OID4VP spec (<a href="https://github.com/openid/OpenID4VP/pull/401#issuecomment-2776912290" target="_blank">https://github.com/openid/OpenID4VP/pull/401#issuecomment-2776912290</a>).</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt"> Samuel
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:12.0pt">
<b><span lang="EN-GB" style="font-size:11.0pt;font-family:NEUEHAASDISPLAY-MEDIU;color:#0C0242">Samuel Rinnetmäki</span></b><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:12.0pt">
<span lang="EN-GB" style="font-size:11.0pt;font-family:"NeueHaasGroteskDisp Pro";color:#0C0242">CTO</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:12.0pt">
<span lang="EN-GB" style="font-size:11.0pt;font-family:"NeueHaasGroteskDisp Pro";color:#0C0242">Findynet Cooperative</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:12.0pt">
<span lang="EN-GB" style="font-size:11.0pt;font-family:"NeueHaasGroteskDisp Pro";color:#0C0242"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-GB" style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div id="m_3123872580928034833mail-editor-reference-message-container">
<div>
<div>
<div style="border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0in 0in 0in;border-color:currentcolor currentcolor">
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"><b><span style="color:black">From:
</span></b><span style="color:black">Openid-specs-ab <<a href="mailto:openid-specs-ab-bounces@lists.openid.net" target="_blank">openid-specs-ab-bounces@lists.openid.net</a>> on behalf of Joe DeCock via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>><br>
<b>Date: </b>Thursday, 3. April 2025 at 19.30<br>
<b>To: </b><a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a> <<a href="mailto:openid-specs-ab@lists.openid.net" target="_blank">openid-specs-ab@lists.openid.net</a>><br>
<b>Cc: </b>Joe DeCock <<a href="mailto:joe@duendesoftware.com" target="_blank">joe@duendesoftware.com</a>><br>
<b>Subject: </b>[Openid-specs-ab] Meeting Minutes for April 3rd</span><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"># Connect/AB Minutes for April 3, 2025<o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br>
<span class="m3123872580928034833gmail-im">## Attendees</span><br>
<span class="m3123872580928034833gmail-im">Michael Jones, Chair</span><br>
Nat Sakimura, Chair<br>
<span class="m3123872580928034833gmail-im">Joe DeCock, Notetaker</span><br>
<span class="m3123872580928034833gmail-im">Aaron Parecki</span><br>
<span class="m3123872580928034833gmail-im">Andy Barlow</span><br>
<span class="m3123872580928034833gmail-im">Brian Campbell</span><br>
<span class="m3123872580928034833gmail-im">Chris Phillips</span><br>
<span class="m3123872580928034833gmail-im">Daniel Fett</span><br>
<span class="m3123872580928034833gmail-im">Dick Hardt</span><br>
<span class="m3123872580928034833gmail-im">Filip Skokan</span><br>
<span class="m3123872580928034833gmail-im">Joseph Heenan</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Łukasz Jaromin<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Marcus Almgren<br>
Samuel Rinnetmäki<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span class="m3123872580928034833gmail-im">Stefan Santesson</span><br>
<span class="m3123872580928034833gmail-im">Tim Cappalli</span><br>
<br>
<span class="m3123872580928034833gmail-im">## Events</span><br>
<span class="m3123872580928034833gmail-im">### OpenID Workshop and IIW, Apr 7-10, Mountain View, California</span><br>
<span class="m3123872580928034833gmail-im"> - <a href="https://internetidentityworkshop.com/" target="_blank">
https://internetidentityworkshop.com/</a></span><br>
<span class="m3123872580928034833gmail-im"> - <a href="https://openid.net/attend-the-oidf-workshop-prior-to-iiw-spring-2025-on-7th-april-2025/" target="_blank">
https://openid.net/attend-the-oidf-workshop-prior-to-iiw-spring-2025-on-7th-april-2025/</a></span><br>
<span class="m3123872580928034833gmail-im">### OpenID Federation Interop, April 28-30, hosted by SUNET in Stockholm</span><br>
<span class="m3123872580928034833gmail-im"> - Sign up in the attendee spreadsheet:
<a href="https://docs.google.com/spreadsheets/d/1zYl-wdzgyol9u3ho342GZhSsg0hhqqneJHlMXWJSIw0/edit?gid=25633585#gid=25633585" target="_blank">
https://docs.google.com/spreadsheets/d/1zYl-wdzgyol9u3ho342GZhSsg0hhqqneJHlMXWJSIw0/edit?gid=25633585#gid=25633585</a></span><br>
<span class="m3123872580928034833gmail-im"> - Run the Federation Certification Tests:
<a href="https://openid.net/certification/federation_testing/" target="_blank">https://openid.net/certification/federation_testing/</a></span><br>
<br>
<span class="m3123872580928034833gmail-im">## Coordination between DCP and Connect WGs on Client ID Values</span><br>
<span class="m3123872580928034833gmail-im">### Background</span><br>
<span class="m3123872580928034833gmail-im">- OpenID4VP's Client IDs and OpenID Federation's Client IDs are currently compatible</span><br>
<span class="m3123872580928034833gmail-im">- An OpenID4VP PR has proposed prefixing OpenID Federation Client ID values, which would be a breaking change to OpenID Federation</span><br>
<span class="m3123872580928034833gmail-im">- An OpenID4VP PR-on-that-PR has proposed making the prefix optional, which would make it a non-breaking change</span><br>
<span class="m3123872580928034833gmail-im">- Joseph Heenan filed an OpenID Federation issue discussing the situation and possible choices</span><br>
<span class="m3123872580928034833gmail-im">- Chairs wanted to coordinate across the working groups to prevent incompatibility</span><br>
<span class="m3123872580928034833gmail-im">### Discussion</span><br>
<span class="m3123872580928034833gmail-im">- Brian: Original PR is aiming for consistency within OpenID4VP, and has exceptions for this use case. He raises process concerns.</span><br>
- Joseph: Goal is consistency across OpenID's various specifications.<br>
- Aaron: Asks a layering question: What are the dependencies between Connect, Federation, and OpenID4VP? Is it the case that VP has the most dependencies?<br>
<span class="m3123872580928034833gmail-im">- Daniel: VP and Federation are siblings.</span><br>
<span class="m3123872580928034833gmail-im">- Brian: That's true, but there is a complex relationship between VP and Federation.</span><br>
- Aaron: In that case, VP should be consistent within itself. Non-VP usage shouldn't break if VP changes internally, and so he intends to retract his PR.<br>
- Daniel: Agree, other specs might run into the same thing, specs should be internally consistent.<br>
<span class="m3123872580928034833gmail-im">- Mike: Goal is that you should be able to use VP and Federation together. Data structures are shared across working groups, so coordination is warranted.
</span><br>
- Mike: Also very important to define Client IDs unambiguously. Brian's PR makes the Client IDs ambiguous. Aaron's PR makes the Client IDs unambiguous. Asks Aaron to not withdraw his PR.<br>
- Daniel Fett: Problem comes from multiple specs having different needs, and this will be a recurring problem.<br>
- Joseph: In real world, https can mean different things. Https probably is not going to be reserved by OAuth for Federation, so they're going to be ambiguous.<br>
- Brian: https is unambiguous only within Federation. In real deployments, it is not.<br>
- Łukasz: We should avoid making client identifiers deployment-specific. Aaron's PR helps with that.
<br>
- Dick: Client IDs having implied meaning is contrary to the original OAuth spec.<br>
- Aaron: OAuth 2.1 updates the Client ID definition.<br>
- Mike: "In the real world" should not constrain us. In fact it's the other way around - our standards exist to constrain what people do. Things should be unambiguous *when people use our standards*. That's the purpose of standards. If you follow the specs,
you get unambiguous Client IDs.<br>
- Mike: OAuth leaves Client ID semantics up to profiles, and the profiles can make some treatment of Client IDs and still be compatible. But different Client ID syntax for different contexts will lead to developers making mistakes and would be a failure on
our part.<br>
- Aaron: Has a proposal that doesn't agree with Mike's assessment: Require prefix in VP, and define Client IDs in Federation as using https. The inconsistency doesn't seem like a big deal, doesn't agree that it is a failure that they are different.<br>
- Stefan and Aaron: Root of the problem is, how do you find metadata? Ambiguity means that there's more than 1 way to get the metadata.<br>
- Joseph: What should Federation do? Do we want to change to make Federation's Client IDs unambiguous?<br>
- Mike: They already are unambiguous. The problem is that differing syntax between the workgroups would mean that the Client ID is confusing.<br>
- Aaron: Wallets and Federation are very separate, users of the two specs are separate, so there's not much risk of confusion.<br>
- Mike: No, you can use Federation for trust establishment, e.g., the Italian deployment uses them together.<br>
- Dick: Reiterates that Client IDs were originally opaque.<br>
- Brian: Supports Aaron's proposal, and if we want consistency in Federation, then Federation might need to change, but he has not suggested that because ...<br>
<br>
Here the meeting's Zoom call ended abruptly for unknown reasons.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net" target="_blank">Openid-specs-ab@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-ab" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-ab</a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br>
<b><i><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif;color:#555555;border:none windowtext 1.0pt;padding:0in">CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s).
Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.</span></i></b><o:p></o:p></p>
</div>
</body>
</html>