<div dir="ltr"><div>It is available here: <a href="https://bitbucket.org/openid/fapi/wiki/FAPI_Meeting_Notes_2025-02-19_Atlantic">https://bitbucket.org/openid/fapi/wiki/FAPI_Meeting_Notes_2025-02-19_Atlantic</a></div><div><br></div><div>The list of all the meeting notes are at: <a href="https://bitbucket.org/openid/fapi/wiki/browse/">https://bitbucket.org/openid/fapi/wiki/browse/</a></div><div>A paginated version of this index is available at <a href="https://bitbucket.org/openid/fapi/wiki/Home">https://bitbucket.org/openid/fapi/wiki/Home</a></div><div><br></div><div><h1 id="gmail-markdown-header-fapi-working-group-meeting-notes" style="color:rgb(23,43,77);margin:0px 0px 10px;padding:0px;font-weight:400;font-size:24px;letter-spacing:-0.01em;line-height:1.25;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">FAPI Working Group Meeting Notes</h1><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;"><strong>Date:</strong> February 19, 2025</li><li style="margin:0px"><strong>Time:</strong> 14:00 GMT</li><li style="margin:0px"><strong>Location</strong> Zoom</li></ul><h2 id="gmail-markdown-header-attendees" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:20px;letter-spacing:-0.008em;line-height:1.5;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">Attendees</h2><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">Nat Sakimura (Chair), Dave Tonge, Mike Leszcz (OIDF), Dima Postnikov, Bjorn Hjelm, Hideki Ikeda, Filip Skokan, Peter Wallach (Mastercard), Robert Gallagher (Mastercard), George Fletcher, Peter Stanley (OBL), Kosuke Koiwai</p><h2 id="gmail-markdown-header-1-roll-call" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:20px;letter-spacing:-0.008em;line-height:1.5;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">1. Roll Call</h2><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">Attendance was taken via chat window.</p><h2 id="gmail-markdown-header-2-adoption-of-agenda" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:20px;letter-spacing:-0.008em;line-height:1.5;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">2. Adoption of Agenda</h2><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">The agenda was adopted as presented: 1. Roll Call 2. Adoption of Agenda 3. Events 4. External Orgs & Liaisons 5. PRs 6. Issues 7. AOB</p><h2 id="gmail-markdown-header-3-events" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:20px;letter-spacing:-0.008em;line-height:1.5;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">3. Events</h2><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><strong>Mike Leszcz shared upcoming events:</strong></p><h3 id="gmail-markdown-header-31-fapi-20-security-profile-and-attacker-model-is-final" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:18px;letter-spacing:-0.006em;line-height:1.38889;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">3.1 FAPI 2.0 Security profile and attacker model is FINAL</h3><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">The voting closed, and it passed. Congratulations to the working group.</p><h3 id="gmail-markdown-header-32-other-events" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:18px;letter-spacing:-0.006em;line-height:1.38889;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">3.2 Other events</h3><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;">OSW 2025: Feb 26-28 in Reykjavik, Iceland</li><li style="margin:0px">DICE: March 4-5 in Zurich</li><li style="margin:0px">ISO/IEC JTC 1/SC 27/WG5: March 10-15, 2025 in Fairfax</li><li style="margin:0px">ISO/IEC JTC 1/SC 27: March 17-18, 2025 in Fairfax</li><li style="margin:0px">MOSIP Connect: March 11-13 in Philippines</li><li style="margin:0px">IETF: March 15-21 in Bangkok</li><li style="margin:0px">OIDF Workshop prior to IIW: April 7th at Google in Mountain View<ul style="margin-top:0px;padding-top:0px;padding-right:0px;padding-bottom:0px"><li style="overflow-wrap: break-word;">DCP WG meeting prior to the workshop</li></ul></li><li style="margin:0px">IIW Spring 2025: April 8-10</li></ul><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">The OIDF calendar on the website is current: <a href="https://openid.net/calendar/" rel="nofollow" style="text-decoration-line:none">https://openid.net/calendar/</a></p><h2 id="gmail-markdown-header-4-external-orgs-liaisons" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:20px;letter-spacing:-0.008em;line-height:1.5;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">4. External Orgs & Liaisons</h2><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><strong>Mike Leszcz provided ecosystem updates:</strong></p><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;">Announced FAPI 2 specifications have been approved</li><li style="margin:0px">Working on annual FAPI recertifications for Open Finance Brazil and Open Insurance Brazil<ul style="margin-top:0px;padding-top:0px;padding-right:0px;padding-bottom:0px"><li style="overflow-wrap: break-word;">January 2025 was one of the largest months for certification requests</li></ul></li><li style="margin:0px">Coordinating with Dima on a follow-up meeting with CMF in Chile<ul style="margin-top:0px;padding-top:0px;padding-right:0px;padding-bottom:0px"><li style="overflow-wrap: break-word;">Dima is working on a reference architecture for a white paper</li><li style="margin:0px">CMF will provide input while OIDF continues supporting their FAPI 2 adoption</li></ul></li><li style="margin:0px">Will notify all ecosystem partners about the FAPI 2 finalization</li></ul><h2 id="gmail-markdown-header-5-prs" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:20px;letter-spacing:-0.008em;line-height:1.5;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">5. PRs</h2><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">Dave Tonge provided an update on outstanding PRs:</p><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;">Cross-device flow PR: still needs improved notes</li><li style="margin:0px">Message signing spec: awaiting updated reference to security analysis from researchers<ul style="margin-top:0px;padding-top:0px;padding-right:0px;padding-bottom:0px"><li style="overflow-wrap: break-word;">Once received, will submit final document for message signing</li></ul></li></ul><h2 id="gmail-markdown-header-6-issues" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:20px;letter-spacing:-0.008em;line-height:1.5;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">6. Issues</h2><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">Several issues were discussed:</p><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><strong>Issue <a href="https://bitbucket.org/openid/fapi/issues/736/move-fapi1-fapi2-comparison-table-from" rel="nofollow" style="text-decoration-line:none"><s>#736</s></a>: Move FAPI 1/FAPI 2 comparison table from spec</strong></p><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;">Dima raised the issue that the comparison table might not be relevant for ecosystems adopting FAPI 2 directly</li><li style="margin:0px">Determined it's too late to remove as specs are already approved</li><li style="margin:0px">Issue closed</li></ul><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><strong>Issue <a href="https://bitbucket.org/openid/fapi/issues/734/summary-of-changes-between-fapi2sp-id2-and" rel="nofollow" style="text-decoration-line:none">#734</a>: Summary of changes between FAPI2-SP-ID2 and final</strong></p><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;">Dima is working on documenting differences between the last implementer's draft and the final version</li><li style="margin:0px">Requested reviewers to help validate the document</li><li style="margin:0px">Particularly relevant for ecosystems migrating from ID2 to the final version</li></ul><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><strong>Issue <a href="https://bitbucket.org/openid/fapi/issues/610/ability-for-as-to-reject-requests-that" rel="nofollow" style="text-decoration-line:none">#610</a>: State parameter length</strong></p><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;">Discussion about what happened to the state parameter length requirements</li><li style="margin:0px">General recollection that it was moved to implementation guidelines</li><li style="margin:0px">Current spec only mentions state parameter value could exceed 1,000 characters</li></ul><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><strong>Issue <a href="https://bitbucket.org/openid/fapi/issues/425/fapi-20-purpose-and-fapi-wg-scope" rel="nofollow" style="text-decoration-line:none">#425</a>: FAPI 2.0 purpose and FAPI WG scope</strong></p><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;">Nat and Dave have been exchanging emails to move this forward</li></ul><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">Other issues:</p><ul style="padding-top:0px;padding-right:0px;padding-bottom:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px"><li style="overflow-wrap: break-word;">The conformance team will discuss the private key JWT audience issue at their in-person meeting next week</li></ul><h2 id="gmail-markdown-header-7-aob" style="color:rgb(23,43,77);margin:20px 0px 0px;padding:0px;font-weight:400;font-size:20px;letter-spacing:-0.008em;line-height:1.5;font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif">7. AOB</h2><p style="padding:0px;color:rgb(23,43,77);font-family:-apple-system,"system-ui","Segoe UI",Roboto,Oxygen,Ubuntu,"Fira Sans","Droid Sans","Helvetica Neue",sans-serif;font-size:14px">No other business was raised.</p><br class="gmail-Apple-interchange-newline"></div><div><br></div></div>