<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#0b5394">"Or should it be draconian and then extreme…
<span style="font-family:"Apple Color Emoji"">☺"</span><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#0b5394"><span style="font-family:"Apple Color Emoji""><br></span></div><div class="gmail_default" style="font-family:tahoma,sans-serif;color:#0b5394"><span style="font-family:"Apple Color Emoji"">My point exactly!</span></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 24 Oct 2019 at 17:50, Ralph Bragg <<a href="mailto:ralph.bragg@raidiam.com">ralph.bragg@raidiam.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">





<div lang="EN-GB">
<div class="gmail-m_4921579241756056939WordSection1">
<p class="MsoNormal"><span>And it leaves room for “extreme” “draconian” and other profiles to be slotted around the “substantial” and “high”. Perhaps a key document will be required to offer clarity.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>“low”<u></u><u></u></span></p>
<p class="MsoNormal"><span>“substantial”<u></u><u></u></span></p>
<p class="MsoNormal"><span>“high”<u></u><u></u></span></p>
<p class="MsoNormal"><span>“extreme”<u></u><u></u></span></p>
<p class="MsoNormal"><span>“draconian” <u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>Or should it be draconian and then extreme…
</span><span style="font-family:"Apple Color Emoji"">☺</span><span><u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:12pt;color:black">From: </span></b><span style="font-size:12pt;color:black">Openid-specs-fapi <<a href="mailto:openid-specs-fapi-bounces@lists.openid.net" target="_blank">openid-specs-fapi-bounces@lists.openid.net</a>> on behalf of Steinar Noem via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>><br>
<b>Reply to: </b>Financial API Working Group List <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>><br>
<b>Date: </b>Thursday, 24 October 2019 at 17:45<br>
<b>To: </b>Financial API Working Group List <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>><br>
<b>Cc: </b>Steinar Noem <<a href="mailto:steinar@udelt.no" target="_blank">steinar@udelt.no</a>>, Rob Otto <<a href="mailto:robotto@pingidentity.com" target="_blank">robotto@pingidentity.com</a>><br>
<b>Subject: </b>Re: [Openid-specs-fapi] Title change of Part 1 and Part 2.<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<p class="MsoNormal">I like it a lot.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">For me “High” and «Substantial» maps to the LoA from eIDAS. And an unprofiled use of OAuth perhaps would map to “Low”.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">tor. 24. okt. 2019 kl. 18:19 skrev Rob Otto via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>>:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:rgb(11,83,148)">Hi folks. I agree that we should definitely re-look these names!<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:rgb(11,83,148)"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:rgb(11,83,148)">I must admit, to me it was not immediately clear how "substantial" and "high" related to one another since there is no natural ordering of these terms in English. Turns out that
 "high" should be interpreted as more secure than "substantial" but that wasn't clear to me on first reading. Is this just me, or do others find the same thing?<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:rgb(11,83,148)"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:rgb(11,83,148)">Best regards<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:rgb(11,83,148)">Rob<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Tahoma,sans-serif;color:rgb(11,83,148)"><u></u> <u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Thu, 24 Oct 2019 at 16:34, Nat Sakimura via Openid-specs-fapi <<a href="mailto:openid-specs-fapi@lists.openid.net" target="_blank">openid-specs-fapi@lists.openid.net</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<p class="MsoNormal">Hi<br>
<br>
Back in the IIW, I discussed with Torsten about the potential title <br>
change of Part 1 and Part 2. Currently, they are Read Only and <br>
Read&Write respectively but there are cases where the read only data is <br>
very sensitive while write operation is not of high value.<br>
<br>
Thus, we agreed that the current name may not be representing the real <br>
intention: Medium and High security profile respectively.<br>
<br>
During the discussion, we came up with the name:<br>
<br>
- Substantial (for Part 1)<br>
- High (for Part 2)<br>
<br>
It follows eIDAS marking.<br>
<br>
More details are recorded in the ticket #271.<br>
<br>
<a href="https://bitbucket.org/openid/fapi/issues/271/rename-and-adjust-fapi-profiles" target="_blank">https://bitbucket.org/openid/fapi/issues/271/rename-and-adjust-fapi-profiles</a><br>
<br>
The participants in the Oct. 9 call all agreed to it.<br>
This mail is to solicit wider opinions on it.<br>
<br>
Please let us know of your opinions.<br>
<br>
Best,<br>
<br>
Nat Sakimura<br>
Chair, FAPI WG.<br>
_______________________________________________<br>
Openid-specs-fapi mailing list<br>
<a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-fapi" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<div>
<table border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td width="113" style="width:84.75pt;padding:0cm">
<p class="MsoNormal"><a href="https://www.pingidentity.com/" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1033" alt="Image removed by sender. Ping Identity"></span></span></a><u></u><u></u></p>
</td>
<td style="padding:0cm">
<table border="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0.75pt">
<p class="MsoNormal"><b><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(230,29,60)">Rob Otto</span></b>
<br>
<span style="font-size:10.5pt;font-family:Arial,sans-serif;color:black">EMEA Field CTO/Solutions Architect</span>
<br>
<span style="font-size:10.5pt;font-family:Arial,sans-serif"><a href="mailto:robertotto@pingidentity.com" target="_blank">robertotto@pingidentity.com</a></span>
<br>
<br>
<span style="font-size:10.5pt;font-family:Arial,sans-serif;color:black">c: +44 (0) 777 135 6092</span>
<u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td colspan="2" style="padding:0cm">
<table border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100%;border-collapse:collapse">
<tbody>
<tr style="height:30pt">
<td style="padding:0.75pt;height:30pt">
<p class="MsoNormal" style="margin-top:6pt"><b><span style="font-size:10.5pt;font-family:Arial,sans-serif;color:rgb(64,71,75)">Connect with us:
<u></u><u></u></span></b></p>
</td>
<td style="padding:3pt 0cm 0cm 15pt;height:30pt">
<p class="MsoNormal" style="margin-top:6pt"><a href="https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.11,24.htm" title=""Ping on Glassdoor" t" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1032" alt="Image removed by sender. Glassdoor logo"></span></span></a><a href="https://www.linkedin.com/company/21870" title=""Ping on LinkedIn" t" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1031" alt="Image removed by sender. LinkedIn logo"></span></span></a><a href="https://twitter.com/pingidentity" title=""Ping on Twitter" t" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1030" alt="Image removed by sender. twitter logo"></span></span></a><a href="https://www.facebook.com/pingidentitypage" title=""Ping on Facebook" t" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1029" alt="Image removed by sender. facebook logo"></span></span></a><a href="https://www.youtube.com/user/PingIdentityTV" title=""Ping on Youtube" t" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1028" alt="Image removed by sender. youtube logo"></span></span></a><a href="https://plus.google.com/u/0/114266977739397708540" title=""Ping on Google+" t" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1027" alt="Image removed by sender. Google+ logo"></span></span></a><a href="https://www.pingidentity.com/en/blog.html" title=""Ping Blog" t" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1026" alt="Image removed by sender. Blog logo"></span></span></a><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><a href="https://www.pingidentity.com/en/events/d/identify-2019.html" target="_blank"><span style="color:windowtext;text-decoration:none"><span style="color:blue;border:1pt solid windowtext;padding:0cm"><img border="0" width="32" height="32" style="width: 0.3333in; height: 0.3333in;" id="gmail-m_4921579241756056939_x0000_i1025" alt="Image removed by sender."></span></span></a><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><br>
<b><i><span style="font-size:10pt;font-family:"Segoe UI";color:rgb(85,85,85);border:1pt none windowtext;padding:0cm">CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review,
 use, distribution or disclosure by others is strictly prohibited.  If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.</span></i></b>_______________________________________________<br>
Openid-specs-fapi mailing list<br>
<a href="mailto:Openid-specs-fapi@lists.openid.net" target="_blank">Openid-specs-fapi@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-fapi" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-fapi</a><u></u><u></u></p>
</blockquote>
</div>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="color:rgb(34,34,34)">Vennlig hilsen</span><span style="color:rgb(80,0,80)"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:rgb(80,0,80)"><u></u> <u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="color:rgb(34,34,34)">Steinar Noem<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:rgb(34,34,34)">Partner Udelt AS<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:rgb(34,34,34)">Systemutvikler<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:rgb(34,34,34)"> <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:rgb(34,34,34)">| <a href="mailto:steinar@udelt.no" target="_blank"><span style="color:rgb(34,34,34);background:rgb(255,255,204)">steinar@udelt.no</span></a> | <a href="mailto:hei@udelt.no" target="_blank"><span style="color:rgb(17,85,204)">hei@udelt.no</span></a>  | +47
 955 21 620 | <a href="http://www.udelt.no/" target="_blank"><span style="color:rgb(17,85,204)">www.udelt.no</span></a> | <u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>

</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div style="padding:0px;margin:0px">    <table style="border-collapse:collapse;padding:0px;margin:0px">                   <tbody><tr>                         <td style="width:113px">                                        <a href="https://www.pingidentity.com" target="_blank"></a><a href="https://www.pingidentity.com" target="_blank"><img alt="Ping Identity" src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/ping-logo.png"></a>                                </td>                             <td>                                      <table>                                                                                           <tbody><tr>                         <td style="vertical-align:top">                                 <span style="color:rgb(230,29,60);display:inline-block;margin-bottom:3px;font-family:arial,helvetica,sans-serif;font-weight:bold;font-size:14px">Rob Otto</span>                                                          <br>                                                              <span style="color:rgb(0,0,0);display:inline-block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;font-weight:normal;font-size:14px">EMEA Field CTO/Solutions Architect</span>                                                          <br>                                                              <span style="font-family:arial,helvetica,sans-serif;font-size:14px;display:inline-block;margin-bottom:3px"><a href="mailto:robertotto@pingidentity.com" target="_blank">robertotto@pingidentity.com</a></span>                                                            <br>                                                              <span style="color:rgb(0,0,0);display:inline-block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;font-weight:normal;font-size:14px">                                                         </span>                                                           <br>                                                              <span style="color:rgb(0,0,0);display:inline-block;margin-bottom:2px;font-family:arial,helvetica,sans-serif;font-weight:normal;font-size:14px">                                                         c: +44 (0) 777 135 6092</span>                                                    </td>                           </tr>                                       </tbody></table>                            </td>                     </tr>                     <tr>                                      <td colspan="2">          <table style="border-collapse:collapse;border:none;margin:8px 0px 0px;width:100%">            <tbody><tr style="height:40px;border-top:1px solid rgb(211,211,211);border-bottom:1px solid rgb(211,211,211)">              <td style="font-family:arial,helvetica,sans-serif;font-size:14px;font-weight:bold;color:rgb(64,71,75)">Connect with us: </td>              <td style="padding:4px 0px 0px 20px">                <a href="https://www.glassdoor.com/Overview/Working-at-Ping-Identity-EI_IE380907.11,24.htm" style="text-decoration:none;margin-right:16px" title="Ping on Glassdoor" target="_blank"><img src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-glassdoor.png" style="border: none; margin: 0px;" alt="Glassdoor logo"></a>                                                                            <a href="https://www.linkedin.com/company/21870" style="text-decoration:none;margin-right:16px" title="Ping on LinkedIn" target="_blank"><img src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-linkedin.png" style="border: none; margin: 0px;" alt="LinkedIn logo"></a>                                        <a href="https://twitter.com/pingidentity" style="text-decoration:none;margin-right:16px" title="Ping on Twitter" target="_blank"><img src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-twitter.png" style="border: none; margin: 0px;" alt="twitter logo"></a>                                                                             <a href="https://www.facebook.com/pingidentitypage" style="text-decoration:none;margin-right:16px" title="Ping on Facebook" target="_blank"><img src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-facebook.png" style="border: none; margin: 0px;" alt="facebook logo"></a>                                                               <a href="https://www.youtube.com/user/PingIdentityTV" style="text-decoration:none;margin-right:16px" title="Ping on Youtube" target="_blank"><img src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-youtube.png" style="border: none; margin: 0px 0px 3px;" alt="youtube logo"></a>                                                                                                                <a href="https://plus.google.com/u/0/114266977739397708540" style="text-decoration:none;margin-right:16px" title="Ping on Google+" target="_blank"><img src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-googleplus.png" style="border: none; margin: 0px;" alt="Google+ logo"></a>                                                        <a href="https://www.pingidentity.com/en/blog.html" style="text-decoration:none;margin-right:16px" title="Ping Blog" target="_blank"><img src="https://www.pingidentity.com/content/dam/pic/images/misc/signature/social-blog.png" style="border: none; margin: 0px;" alt="Blog logo"></a>                                                                                                                     </td>            </tr>          </tbody></table>                                </td>      </tr>    </tbody></table><a href="https://www.google.com/url?q=https://www.pingidentity.com/content/dam/ping-6-2-assets/Assets/faqs/en/consumer-attitudes-post-breach-era-3375.pdf?id%3Db6322a80-f285-11e3-ac10-0800200c9a66&source=gmail&ust=1541693608526000&usg=AFQjCNGBl5cPHCUAVKGZ_NnpuFj5PHGSUQ" target="_blank"></a><a href="https://www.pingidentity.com/en/events/d/identify-2019.html" target="_blank"><img src="https://www.pingidentity.com/content/dam/ping-6-2-assets/images/misc/emailSignature/identify-email-image.png"></a>  </div></div></div>

<br>
<i style="margin:0px;padding:0px;border:0px;outline:0px;vertical-align:baseline;background:rgb(255,255,255);font-family:proxima-nova-zendesk,system-ui,-apple-system,system-ui,"Segoe UI",Roboto,Oxygen-Sans,Ubuntu,Cantarell,"Helvetica Neue",Arial,sans-serif;color:rgb(85,85,85)"><span style="margin:0px;padding:0px;border:0px;outline:0px;vertical-align:baseline;background:transparent;font-family:proxima-nova-zendesk,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ubuntu,Cantarell,"Helvetica Neue",Arial,sans-serif;font-weight:600"><font size="2">CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited.  If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you.</font></span></i>