<div dir="ltr"><div>I've got a conflict and won't be able to make the call today. <br></div><div><br></div><div>The two pull requests (linked below) to the OpenID Connect Token Bound Authentication draft are the only outstanding issues I would have had on my agenda for the call. <br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 7, 2018 at 12:24 PM, Mike Jones via Openid-specs-eap <span dir="ltr"><<a href="mailto:openid-specs-eap@lists.openid.net" target="_blank">openid-specs-eap@lists.openid.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_1560991655583373906WordSection1">
<p class="MsoNormal">EAP Call Notes 7-Jun-18</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Brian Campbell</p>
<p class="MsoNormal">Mike Jones</p>
<p class="MsoNormal">Bjorn Hjelm</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Brian created two PRs for the Token Binding spec</p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/eap/pull-requests/5" target="_blank">https://bitbucket.org/openid/<wbr>eap/pull-requests/5</a></p>
<p class="MsoNormal"> <a href="https://bitbucket.org/openid/eap/pull-requests/4/be-explicit-that-the-base64url-encoding-of/diff" target="_blank">https://bitbucket.org/openid/<wbr>eap/pull-requests/4/be-<wbr>explicit-that-the-base64url-<wbr>encoding-of/diff</a></p>
<p class="MsoNormal"> Mike will review these</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Brian will look at whether parallel changes need to be made to the OAuth Token Binding specs</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">We should take this to Implementer's Draft status when the IETF specs finish</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Token Binding with endpoints behind firewalls</p>
<p class="MsoNormal"> Bjorn reports that Michael Engan at T-Mobile raised issues about when the endpoints are behind firewalls</p>
<p class="MsoNormal"> Mike believes that Brian's Token Binding TLS Termination spec covers this use case</p>
<p class="MsoNormal"> <a href="https://tools.ietf.org/html/draft-ietf-tokbind-ttrp-04" target="_blank">https://tools.ietf.org/html/<wbr>draft-ietf-tokbind-ttrp-04</a></p>
<p class="MsoNormal"> Bjorn will talk with Michael about this possibility</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Java changes for Token Binding</p>
<p class="MsoNormal"> Brian's mods to Java are public</p>
<p class="MsoNormal"> <a href="https://github.com/pingidentity/java8-token-binding-negotiation" target="_blank">https://github.com/<wbr>pingidentity/java8-token-<wbr>binding-negotiation</a></p>
<p class="MsoNormal"> <a href="https://github.com/pingidentity/java9-token-binding-negotiation" target="_blank">https://github.com/<wbr>pingidentity/java9-token-<wbr>binding-negotiation</a></p>
<p class="MsoNormal"> <a href="https://github.com/pingidentity/java10-token-binding-negotiation" target="_blank">https://github.com/<wbr>pingidentity/java10-token-<wbr>binding-negotiation</a></p>
<p class="MsoNormal"> They are licensed consistently with the Java license</p>
<p class="MsoNormal"> Brian's utility library is also available but needs more documentation</p>
<p class="MsoNormal"> <a href="https://github.com/pingidentity/token-binding-java" target="_blank">https://github.com/<wbr>pingidentity/token-binding-<wbr>java</a></p>
<p class="MsoNormal"> It uses the Apache 2.0 license</p>
</div>
</div>
<br>______________________________<wbr>_________________<br>
Openid-specs-eap mailing list<br>
<a href="mailto:Openid-specs-eap@lists.openid.net">Openid-specs-eap@lists.openid.<wbr>net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-eap" rel="noreferrer" target="_blank">http://lists.openid.net/<wbr>mailman/listinfo/openid-specs-<wbr>eap</a><br>
<br></blockquote></div><br></div></div>
<br>
<i style="margin:0px;padding:0px;border:0px;outline:0px;vertical-align:baseline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-ui,-apple-system,system-ui,"Segoe UI",Roboto,Oxygen-Sans,Ubuntu,Cantarell,"Helvetica Neue",Arial,sans-serif;color:rgb(85,85,85)"><span style="margin:0px;padding:0px;border:0px;outline:0px;vertical-align:baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ubuntu,Cantarell,"Helvetica Neue",Arial,sans-serif;font-weight:600"><font size="2">CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.</font></span></i>