[Openid-specs-fapi] Errata or dot-release

[Nat Sakimura]

Hi.

As noted in the meeting notes yesterday [1], a question was raised whether
we can make normative changes in errata.

The answer is yes. There is a precedence in OpenID Connect core where a
security issue identified in the Self-Issued "sub" computation was fixed in
Errata 1.

[1]
https://bitbucket.org/openid/fapi/wiki/FAPI_Meeting_Notes_2024-11-27_Atlantic

Best regards,

Nat Sakimura
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-fapi/attachments/20241128/849372d3/attachment.htm>