<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">+1<div class=""><br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><span class="Apple-style-span" style="border-collapse: separate; line-height: normal; border-spacing: 0px;"><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class=""><div class=""><div class="">Phil</div><div class=""><br class=""></div><div class="">@independentid</div><div class=""><a href="http://www.independentid.com" class="">www.independentid.com</a></div></div></div></div></span><a href="mailto:phil.hunt@oracle.com" class="" style="orphans: 2; widows: 2;">phil.hunt@oracle.com</a></div><div class=""><br class=""></div></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Aug 3, 2016, at 2:35 PM, Hardt, Dick via Openid-specs-fastfed <<a href="mailto:openid-specs-fastfed@lists.openid.net" class="">openid-specs-fastfed@lists.openid.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class="">Agreed.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><o:p class=""> </o:p></div><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class="">On 8/3/16, 2:06 PM, someone claiming to be "Openid-specs-fastfed on behalf of<span class="Apple-converted-space"> </span><a href="mailto:openid-specs-fastfed@lists.openid.net" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">openid-specs-fastfed@lists.openid.net</a>" <<a href="mailto:openid-specs-fastfed-bounces@lists.openid.net" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">openid-specs-fastfed-bounces@lists.openid.net</a><span class="Apple-converted-space"> </span>on behalf of<span class="Apple-converted-space"> </span><a href="mailto:openid-specs-fastfed@lists.openid.net" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">openid-specs-fastfed@lists.openid.net</a>> wrote:<span style="font-size: 12pt;" class=""><o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><o:p class=""> </o:p></div></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="border-style: none none none solid; border-left-color: rgb(181, 196, 223); border-left-width: 4.5pt; padding: 0in 0in 0in 4pt; margin-left: 3.75pt; margin-right: 0in;" class=""><div class=""><div class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><span style="color: rgb(0, 32, 96);" class="">I suspect that fastfed will want to take advantage of signed metadata as well.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><span style="color: rgb(0, 32, 96);" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><span style="color: rgb(0, 32, 96);" class=""> -- Mike</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><a name="_MailEndCompose" class=""><span style="color: rgb(0, 32, 96);" class=""> </span><o:p class=""></o:p></a></div><div class=""><div style="border-style: solid none none; border-top-color: rgb(225, 225, 225); border-top-width: 1pt; padding: 3pt 0in 0in;" class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Mike Jones<span class="Apple-converted-space"> </span><br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Wednesday, August 3, 2016 2:05 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab@lists.openid.net" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">openid-specs-ab@lists.openid.net</a>; Roland Hedberg <<a href="mailto:roland@catalogix.se" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">roland@catalogix.se</a>><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>FW: OAuth Metadata Specifications Enhanced<o:p class=""></o:p></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><span style="color: rgb(0, 32, 96);" class="">These OAuth 2.0 metadata updates contain features in part motivated by the OpenID Connect Federation spec – in particular, signed metadata.</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><span style="color: rgb(0, 32, 96);" class=""> </span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><span style="color: rgb(0, 32, 96);" class=""> -- Mike</span><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><span style="color: rgb(0, 32, 96);" class=""> </span><o:p class=""></o:p></div><div class=""><div style="border-style: solid none none; border-top-color: rgb(225, 225, 225); border-top-width: 1pt; padding: 3pt 0in 0in;" class=""><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Mike Jones<span class="Apple-converted-space"> </span><br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Wednesday, August 3, 2016 1:57 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:oauth@ietf.org" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">oauth@ietf.org</a><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>OAuth Metadata Specifications Enhanced<o:p class=""></o:p></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class="">The existing<span class="Apple-converted-space"> </span><a href="https://tools.ietf.org/html/draft-ietf-oauth-discovery" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">OAuth 2.0 Authorization Server Metadata</a><span class="Apple-converted-space"> </span>specification has now been joined by a related<span class="Apple-converted-space"> </span><a href="https://tools.ietf.org/html/draft-jones-oauth-resource-metadata" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">OAuth 2.0 Protected Resource Metadata</a><span class="Apple-converted-space"> </span>specification. This means that JSON metadata formats are now defined for all the OAuth 2.0 parties: clients, authorization servers, and protected resources.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class="">The most significant addition to the OAuth 2.0 Authorization Server Metadata specification is enabling signed metadata, represented as claims in a JSON Web Token (JWT). This is analogous to the role that the Software Statement plays in OAuth Dynamic Client Registration. Signed metadata can also be used for protected resource metadata.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class="">For use cases in which the set of protected resources used with an authorization server are enumerable, the authorization server metadata specification now defines the “<span style="font-family: 'Courier New';" class="">protected_resources</span>” metadata value to list them. Likewise, the protected resource metadata specification defines an “<span style="font-family: 'Courier New';" class="">authorization_servers</span>” metadata value to list the authorization servers that can be used with a protected resource, for use cases in which those are enumerable.<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class="">The specifications are available at:<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri; text-indent: -0.25in;" class=""><span style="font-family: Symbol;" class=""><span class="">·<span style="font-style: normal; font-variant-caps: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';" class=""> <span class="Apple-converted-space"> </span></span></span></span><a href="http://tools.ietf.org/html/draft-ietf-oauth-discovery-04" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">http://tools.ietf.org/html/draft-ietf-oauth-discovery-04</a><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri; text-indent: -0.25in;" class=""><span style="font-family: Symbol;" class=""><span class="">·<span style="font-style: normal; font-variant-caps: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';" class=""> <span class="Apple-converted-space"> </span></span></span></span><a href="http://tools.ietf.org/html/draft-jones-oauth-resource-metadata-00" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">http://tools.ietf.org/html/draft-jones-oauth-resource-metadata-00</a><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class="">HTML-formatted versions are also available at:<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri; text-indent: -0.25in;" class=""><span style="font-family: Symbol;" class=""><span class="">·<span style="font-style: normal; font-variant-caps: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';" class=""> <span class="Apple-converted-space"> </span></span></span></span><a href="http://self-issued.info/docs/draft-ietf-oauth-discovery-04.html" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">http://self-issued.info/docs/draft-ietf-oauth-discovery-04.html</a><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt 0.5in; font-size: 11pt; font-family: Calibri; text-indent: -0.25in;" class=""><span style="font-family: Symbol;" class=""><span class="">·<span style="font-style: normal; font-variant-caps: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-family: 'Times New Roman';" class=""> <span class="Apple-converted-space"> </span></span></span></span><a href="http://self-issued.info/docs/draft-jones-oauth-resource-metadata-00.html" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">http://self-issued.info/docs/draft-jones-oauth-resource-metadata-00.html</a><o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> -- Mike<o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class=""> <o:p class=""></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri;" class="">P.S. This notice was also posted at<span class="Apple-converted-space"> </span><a href="http://self-issued.info/?p=1591" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">http://self-issued.info/?p=1591</a><span class="Apple-converted-space"> </span>and as<span class="Apple-converted-space"> </span><a href="https://twitter.com/selfissued" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">@selfissued</a>.<o:p class=""></o:p></div></div></div></blockquote></div><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); float: none; display: inline !important;" class="">Openid-specs-fastfed mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""><a href="mailto:Openid-specs-fastfed@lists.openid.net" style="color: rgb(149, 79, 114); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class="">Openid-specs-fastfed@lists.openid.net</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""><a href="http://lists.osuosl.org/mailman/listinfo/openid-specs-fastfed" style="color: rgb(149, 79, 114); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class="">http://lists.osuosl.org/mailman/listinfo/openid-specs-fastfed</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" class=""></div></blockquote></div><br class=""></div></body></html>