[OpenID-specs-EAP] WGLC for OpenID Connect EAP ACR Values spec

[Michael Jones]

The WGLC has concluded.  https://openid.net/specs/openid-connect-eap-acr-values-1_0.html has been updated to add security considerations suggested by Andrii Deinega and Brian Campbell (and to acknowledge their contributions).

                                                                Best wishes,
                                                                -- Mike

From: Michael Jones
Sent: Tuesday, March 25, 2025 5:49 PM
To: 'openid-specs-eap at lists.openid.net' <openid-specs-eap at lists.openid.net>
Cc: leifj at sunet.se; Joni Brennan <jonibrennan at gmail.com>; John Bradley <ve7jtb at ve7jtb.com>
Subject: WGLC for OpenID Connect EAP ACR Values spec

This message starts a 2-week Working Group Last Call for the OpenID Connect Extended Authentication Profile (EAP) ACR Values 1.0<https://openid.net/specs/openid-connect-eap-acr-values-1_0.html> specification, prior to submitting it to Foundation-wide review for Final status.  The Context Class values "phr" and "phrh" are now registered in the IANA "Level of Assurance (LoA) Profiles" registry at https://www.iana.org/assignments/loa-profiles/.

The WGLC ends on Tuesday, April 8th.  Please reply-all to this e-mail indicating whether you support progressing the specification to Final status.

After it becomes Final, we anticipate closing the EAP working group<https://openid.net/wg/eap/>.

                                                                Thanks,
                                                                -- Mike

From: Michael Jones
Sent: Sunday, March 23, 2025 11:07 PM
To: openid-specs-eap at lists.openid.net<mailto:openid-specs-eap at lists.openid.net>
Cc: leifj at sunet.se<mailto:leifj at sunet.se>; Joni Brennan <jonibrennan at gmail.com<mailto:jonibrennan at gmail.com>>; John Bradley <ve7jtb at ve7jtb.com<mailto:ve7jtb at ve7jtb.com>>
Subject: Context Class values added to OpenID EAP ACR Values spec

I've updated the OpenID Connect Extended Authentication Profile (EAP) ACR Values 1.0<https://openid.net/specs/openid-connect-eap-acr-values-1_0.html> specification to add the Context Class values needed to enable registration of the two ACR values indicating that phishing-resistant authentication or phishing-resistant-hardware-backed authentication is being requested or has been performed.  Thanks to Leif Johansson for explaining how to create the Context Class files.  They can both be found at https://bitbucket.org/openid/eap/src/master/.

The IANA registrations have been requested - with tracking number [IANA #1415585].

Once these registrations occur, unless working group members want other updates to the spec, we should be able to take the specification to Final status.

                                                                -- Mike

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-eap/attachments/20250409/35f5e1aa/attachment.htm>