<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.gmailmsg
{mso-style-name:gmail_msg;}
span.m-6712748603607203731gmailmsg
{mso-style-name:m_-6712748603607203731gmailmsg;}
p.m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph, li.m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph, div.m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph
{mso-style-name:m_-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.m-6712748603607203731gmailmsg1, li.m-6712748603607203731gmailmsg1, div.m-6712748603607203731gmailmsg1
{mso-style-name:m_-6712748603607203731gmailmsg1;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I need to go back to school. </span><span style='font-size:11.0pt;font-family:Wingdings;color:#1F497D'>J</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Aaron Seib, CEO<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>@CaptBlueButton <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> (o) 301-540-2311<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>(m) 301-326-6843<o:p></o:p></span></p><p class=MsoNormal><a href="nate-trust.org"><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'><img border=0 width=205 height=48 id="Picture_x0020_1" src="cid:image001.jpg@01D25AA5.9D2C1020"></span></a><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Adrian Gropper [mailto:agropper@healthurl.com] <br><b>Sent:</b> Tuesday, December 20, 2016 9:17 AM<br><b>To:</b> Aaron Seib; Glen Marshall [SRS]; Justin Richer<br><b>Cc:</b> Grahame Grieve; John M. Davis; Josh Mandel; kathleen_connor@comcast.net; openid-specs-heart@lists.openid.net<br><b>Subject:</b> Re: [Openid-specs-heart] FHIR Client Registration is the existential issue for HEART<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>As Glen says. Once the AS has the message and the RS has discharged their responsibility on one of those 4 shoebox categories, HEART is done. The Client either gets the data or it doesn't. It doesn't need to know anything about the shoebox endpoint. The client has their own AS endpoint for presenting Claims and getting tokens.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Adrian<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Tue, Dec 20, 2016 at 9:03 AM Glen Marshall [SRS] <<a href="mailto:gfm@securityrs.com">gfm@securityrs.com</a>> wrote:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-bottom:12.0pt'><br><br><br><br><br><br><br><br><br><br><br><o:p></o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span class=gmailmsg><span style='color:black'>The shoebox and communicating its contents are UX matters, not in scope for HEART. </span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='color:black'> </span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> Openid-specs-heart [mailto:<a href="mailto:openid-specs-heart-bounces@lists.openid.net" target="_blank">openid-specs-heart-bounces@lists.openid.net</a>]</span></span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><br><br><span class=gmailmsg><b>On Behalf Of </b>Aaron Seib</span><br><br><br><span class=gmailmsg><b>Sent:</b> Tuesday, December 20, 2016 09:01</span><br><br><br><span class=gmailmsg><b>To:</b> 'Adrian Gropper' <<a href="mailto:agropper@healthurl.com" target="_blank">agropper@healthurl.com</a>>; 'Justin Richer' <<a href="mailto:jricher@mit.edu" target="_blank">jricher@mit.edu</a>></span><br><br><br><span class=gmailmsg><b>Cc:</b> <a href="mailto:kathleen_connor@comcast.net" target="_blank">kathleen_connor@comcast.net</a>; 'Josh Mandel' <<a href="mailto:jmandel@gmail.com" target="_blank">jmandel@gmail.com</a>>; 'John M. Davis' <<a href="mailto:mike.davis@va.gov" target="_blank">mike.davis@va.gov</a>>; 'Grahame Grieve' <<a href="mailto:grahame@healthintersections.com.au" target="_blank">grahame@healthintersections.com.au</a>>; <a href="mailto:openid-specs-heart@lists.openid.net" target="_blank">openid-specs-heart@lists.openid.net</a></span></span><o:p></o:p></p></div></div></div></div><div><div><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><br><br><br><span class=gmailmsg><b>Subject:</b> Re: [Openid-specs-heart] FHIR Client Registration is the existential issue for HEART</span></span><o:p></o:p></p></div></div></div></div><div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>How does the message get from the AS’ shoebox back to the Client?</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> </span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Aaron Seib, CEO</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>@CaptBlueButton</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> (o) 301-540-2311</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>(m) 301-326-6843</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'><img border=0 width=205 height=48 id="m_-6712748603607203731Picture_x0020_1" src="cid:image001.jpg@01D25A9F.E19676C0"></span></a><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> </span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b></span><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Adrian Gropper [<a href="mailto:agropper@healthurl.com" target="_blank">mailto:agropper@healthurl.com</a>]</span></span><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'><br><br><br><br><br><span class=gmailmsg><b>Sent:</b> Monday, December 19, 2016 8:20 PM</span><br><br><br><span class=gmailmsg><b>To:</b> Aaron Seib; Justin Richer</span><br><br><br><span class=gmailmsg><b>Cc:</b> Grahame Grieve; John M. Davis; Josh Mandel; <a href="mailto:kathleen_connor@comcast.net" target="_blank"><br><br>kathleen_connor@comcast.net</a>; <a href="mailto:openid-specs-heart@lists.openid.net" target="_blank"><br><br>openid-specs-heart@lists.openid.net</a></span><br><br><br><span class=gmailmsg><b>Subject:</b> Re: [Openid-specs-heart] FHIR Client Registration is the existential issue for HEART</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>It's part of the Authorizatiion Server API where a Resource Server can send a message such as:<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>- a transaction receipt<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>- a warning about something<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>- an alert that something happens like we routinely get from Twitter, Apple, or Dropbox whenever something related to security occurs<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>- a good faith notice when the RS overrides some aspect of a transaction as specified by the AS<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Adrian<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>On Mon, Dec 19, 2016 at 4:19 PM Aaron Seib <<a href="mailto:aaron.seib@nate-trust.org" target="_blank">aaron.seib@nate-trust.org</a>> wrote:<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>What is a Shoebox endpoint?</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> </span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> </span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> </span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Aaron Seib, CEO</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>@CaptBlueButton</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> (o) 301-540-2311</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>(m) 301-326-6843</span></span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>From:</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><u><span style='color:blue'>agropper@gmail.com</span></u> [mailto:<u><span style='color:blue'>agropper@gmail.com</span></u>]</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br></span><span style='color:windowtext;text-decoration:none'>On Behalf Of </span><span style='color:windowtext;font-weight:normal;text-decoration:none'>Adrian Gropper</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Sent:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Monday, December 19, 2016 3:12 PM</span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>To:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Justin Richer</span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Cc:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Aaron Seib; Grahame Grieve; Josh Mandel; <u><span style='color:blue'><br><br></span></u><u><span style='color:blue'>openid-specs-heart@lists.openid.net</span></u>; John M. Davis; <u><span style='color:blue'><br><br></span></u><u><span style='color:blue'>kathleen_connor@comcast.net</span></u></span></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;font-weight:normal;text-decoration:none'><o:p></o:p></span></a></span></b></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br><span class=m-6712748603607203731gmailmsg><b>Subject:</b> Re: [Openid-specs-heart] FHIR Client Registration is the existential issue for HEART</span></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Justin,<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>I completely understand that's how OAuth and UMA work today. HEART is about use-cases and an outccome. The VA Privacy on FHIR folks have pointed out the same thing from their perspective.<br><br>The usability problem with MU Transmit is obvious. HEART would be for naught if we ignore this and we will look foolish given what we already know. Adding a Shoebox Endpoint to UMA may be the simplest thing to do. That would keep the AS in its current outsource<br><br>role.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>The VA proposal should also be considered.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On Mon, Dec 19, 2016 at 2:55 PM, Justin Richer <<u><span style='color:blue'>jricher@mit.edu</span></u>> wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian,<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>The below does not describe how the OAuth or UMA protocols work. In both cases, the client authenticates itself to the AS, and this includes presentation of the software statement.<br><br>The client does not authenticate to the RS, nor does it identify itself to the RS, nor does it register with the RS, nor does it present any software statement to the RS. The RS outsources that decision to the AS.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> — Justin<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On Dec 17, 2016, at 6:45 PM, Adrian Gropper <<u><span style='color:blue'>agropper@healthurl.com</span></u>> wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Aaron,<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>You're asking exactly the right question but the terms you are using depend on the framing of the issue. Let me try an explanation in my terms.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><b><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br>1 - Consumer Directed Exchange</span><span style='color:windowtext;font-weight:normal;text-decoration:none'> can share data with all sorts of Requesting Parties (RqP) and the FHIR Clients they happen to be using. The RqPs are people who can be authenticated and present claims which may be verified or not. A Client is the RqP's software<br><br>that connects to the RS and the AS. For example, the Client could be an EHR that has a "clipboard" module to use FHIR as a way to fill in the information on a paper clipboard. The clipboard module could be operated by a clerk at the new practice or it might<br><br>be a kiosk that the new patient uses herself.<br><br><br><br><br><br>2 - The FHIR Resource Server (RS) connects to a FHIR Client if it decides it's authorized to do so. This authorization typically comes from the Authorization Server which, in UMA, is primarily responsible for authenticating the RqP and authorizing the Client<br><br>they are using. </span><span style='color:windowtext;text-decoration:none'>However, in the real world, the FHIR RS may have concerns about a particular Client and the RqP they're presenting.</span><span style='color:windowtext;font-weight:normal;text-decoration:none'> These concerns arise from the fact that the HEART / UMA AS is a different legal entity than the RS and may not have the<br><br>RSs best interests in mind. Simply put, the software for Consumer Directed Exchange is (at least) a three-party contract and the three software parties could be completely different businesses under completely different jurisdictions. (The independence of<br><br>the AS party is essential to solving the multiple portals problem.)<o:p></o:p></span></a></b></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>3 - In the real world, RSs have business and jurisdictional reasons to second-guess the authorization server AS decisions. One of these is called "information blocking" in 21st<br><br>Century Cures and was the main subject of the API Task Force that you were on. The Task Force provided clear guidelines for when an authorized FHIR Client engaged in Consumer Directed Exchange could be second-guessed or blocked by the RS.<br><br><b>"Second-guesses" are to be treated as a warning to the patient but can always be overridden by the patient.</b> Outright blocks are allowed only if the AS authorized Client can be shown to present a risk to the integrity of data about _other_ patients on<br><br>that RS. For example, an AS authorized Client can be legitimately blocked if it executes a denial-of-service attack (too many requests/minute) because that would limit the ability of other patients to use the FHIR API.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>4 - A <b><br><br>Trusted software statement</b> is presented to the RS and refers to Client software used for Consumer Directed Exchange. Because it is "trusted" it turns off the second-guess warning. Note that a trusted Client could still be responsible for a denial-of-service<br><br>or other attack so the RS has to protect itself by blocking both trusted and untrusted Clients that misbehave.<br><br><br><br><br><br>5 - A <b>Trusted software statement federation </b>would be the root signature of a trusted software statement. PPR and EFF are unlikely to go into that business. Kantara might be the kind of folks that want to certify software by signing a software statement.<br><br>I don't think they are in this business today. I don't know of any organizations that are in the habit of signing software. There are lots of Certificate Authorities that sign various identities out there but they are not in the software signing business AFAIK.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>6 - Your questions about the difference between the<br><br><b>vendor</b> of a Client and the <b>operator</b> of an instance of a Client is dead-on but irrelevant for the issue of this thread. Vendor or operator, if a software statement is not trusted, or not even signed, all the RS can do is issue a warning. These<br><br>warning will be the rule for many years after FHIR and UMA are out there.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>7 - Right now, the problem for consumers and would-be Clients is that every single RS has a slightly different way of signing-in a Resource Owner. Different portal layouts, different<br><br>passwords, no federation. Even portals from the same EHR vendor are configured differently for different hospitals. If HEART does not profile how the warning is to be issued and dismissed, then the frustrating diversity of RO sign-in will continue even after<br><br>an AS is introduced because the RO will be required to sign-in to dismiss the warning. In that case, the HEART user experience will be roughly the same as the Transmit (of V/D/T) user experience today.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On Sat, Dec 17, 2016 at 1:30 PM, Aaron Seib <<u><span style='color:blue'>aaron.seib@nate-trust.org</span></u>> wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt'><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>Adrian and John</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>All right – this is starting get a little clearer to me but I am still not sure</span><span style='color:#1F497D;text-decoration:none'><br><br>I follow what you are trying to tease out as a gap that needs to be addressed.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>I want to try to understand the assertion you (Adrian) are making in order to</span><span style='color:#1F497D;text-decoration:none'><br><br>distill what precisely the gap is that you are trying to identify as a problem that HEART should be solving. I am sure it is my fault but it feels like we’ve been all over the map but the following seems to be getting close to identifying the specific issue:</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt;margin-left:.5in'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br>This thread is about the Clients. <span class=gmailmsg><span style='background:yellow'>HEART can't presume trusted software statement federations will magically appear</span></span>. There's no work I'm aware of on that front. Even if we did postulate software<br><br>statements for some clients, we still need to deal with the reality that patients can direct access to clients that don't have a trusted software statement.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>It would help me immensely if I could get some clarity on what specifically</span><span style='color:#1F497D;text-decoration:none'><br><br>is meant by the following phrase:</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Trusted software statement federation</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>Can either of you educate me on what this term means in the Technical sense? </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>I think it maps to a need that has been identified in the policy domain for</span><span style='color:#1F497D;text-decoration:none'><br><br>a number of years but we’ve never used this phrase to describe it.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'>What is a software statement specifically?</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'>What makes it trusted?</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'>What does it mean for those statements to be federated?</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>In my world view a software statement is a set of claims (or trust statements)</span><span style='color:#1F497D;text-decoration:none'><br><br>made about a specific software instance.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'>For example – lets postulate that there is a consumer facing application (CFA) that a vendor licenses to different Covered Entities;</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'>Each implementation of that CFA is operated independently by the CE (or non-CE for that matter) and they have their own local policies that affect</span></span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'><br><br><span class=gmailmsg>things relevant to the trust statement being made in the claim;</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'>In the best of all possible worlds each instance of this deployed software solution would have a “software statement” that affirms some claim</span></span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'><br><br><span class=gmailmsg>(Consumer has been ID Proofed to a LOA of 3).</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>It is trusted when the claims are made by an entity whose recognized by the</span><span style='color:#1F497D;text-decoration:none'><br><br>relying party to have a valued opinion.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'>An accreditation body; certification or endorsement by an organization like PPR might provide these kinds of software statements for a particular</span></span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'><br><br><span class=gmailmsg>instance (or product I suppose if the way said product is used doesn’t alter the validity of a claim) that is relevant to the relying party in making a disclosure decision.</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>Federation means that there is an enabling bit of infrastructure that allows</span><span style='color:#1F497D;text-decoration:none'><br><br>relying parties a one stop shop to determine what trusted claims are made about a given CFA to compare against their local policy requirements.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731m-667961714511024648m1172082884616469588m8018461008855031598msolistparagraph><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:Symbol;color:#1F497D;text-decoration:none'>·</span></span><span class=gmailmsg><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'> </span></span><span style='font-size:7.0pt;color:#1F497D;text-decoration:none'><br><br></span><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'>For example – if I am operating an EMR with APIs exposed for CFAs to access data on behalf of a consumer and I want to be able to check several</span></span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;text-decoration:none'><br><br><span class=gmailmsg>things before I release the information (to determine if I need to give the consumer a warning or what have you) I would be able to take an identifier of this CFA (one given to the CFA by the enabling infrastructure when it registered) and search the enabling</span><br><br><span class=gmailmsg>bit of infrastructure to see if there are claims made by “endorsers” that I trust regarding specific attributes of the transaction at hand (releasing PHI to a consumer app that claims to be the one being used by the same person for whom I have PHI).</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>Is that the gap that you see as mission critical to enabling Consumer Directed</span><span style='color:#1F497D;text-decoration:none'><br><br>Exchange at scale?</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>I am trying to put a description of the problem to be addressed together so</span><span style='color:#1F497D;text-decoration:none'><br><br>that even if HEART “puts it in a parking lot” another group that is representative of all of the stakeholders affected can pick up the mantel and work to address the need and HEART can go forward with finishing the business that is a still to be done within</span><span style='color:#1F497D;text-decoration:none'><br><br>the confines of the agreed upon scope.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>Aaron Seib, CEO</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>@CaptBlueButton</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> (o)</span><span style='color:#1F497D;text-decoration:none'><br><br><u><span style='color:blue'>301-540-2311</span></u></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>(m)</span><span style='color:#1F497D;text-decoration:none'><br><br><u><span style='color:blue'>301-326-6843</span></u></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><image004.jpg></span></span><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>From:</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br>Openid-specs-heart [mailto:<u><span style='color:blue'>openid-specs-heart-bounces@lists.openid.net</span></u>]</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br></span><span style='color:windowtext;text-decoration:none'>On Behalf Of </span><span style='color:windowtext;font-weight:normal;text-decoration:none'>Adrian Gropper</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Sent:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Saturday, December 17, 2016 9:30 AM</span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>To:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> John Moehrke</span></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;font-weight:normal;text-decoration:none'><o:p></o:p></span></a></span></b></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br><b>Cc:</b> Josh Mandel; Grahame Grieve; <u><span style='color:blue'><br><br>openid-specs-heart@lists.openid.net</span></u><br><br><br><b>Subject:</b> Re: [Openid-specs-heart] FHIR Client Registration is the existential issue for HEART<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Hey, John! 'tis not the season to be grumpy. This thread is about software statements federation.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>HEART and UMA don't have to choose authentication methods. The AS can implement them all and let the RO choose. Think of self-sovereign ID (a la blockchain) as just another NASCAR button<br><br>for Requesting Parties to click on. We demo this in HIE of One. Here's a 2-minute Demo 5<br><br><u><span style='color:blue'><br><br>https://www.youtube.com/watch?v=FNlAkGauIdw&list=PLn9P7BiqUmmjk09q4I57cvPwysvsScm1p&index=6</span></u><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>I love OpenID Connect because it enables the RS to be an IDP if they choose. That gives the RS a way to gather claims about the Requesting Parties as long as the AS and RO is willing<br><br>to accept them in that role and the RS is willing to take that responsibility. Reminds us of Justin's work at MITRE. Of course, some RS's might balk at taking on the risk of authenticating non-affiliated RqPs but that's why verifiable claims is so cool. HIE<br><br>of One Demo 2 shows this <u><span style='color:blue'><br><br>https://www.youtube.com/watch?v=AxtJ3vaUszo&list=PLn9P7BiqUmmjk09q4I57cvPwysvsScm1p&index=3</span></u> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>This thread is about the Clients. HEART can't presume trusted software statement federations will magically appear. There's no work I'm aware of on that front. Even if we did postulate<br><br>software statements for some clients, we still need to deal with the reality that patients can direct access to clients that don't have a trusted software statement.<br><br><br><br><br><br><br><br>The VA demo starts to get at this problem by asking Clients to register with the RS before they go to the AS. I think that a potential solution. Even so, I still think UMA needs to provide a standard notification endpoint, the so-called shoebox endpoint under<br><br>consideration for UMA 2 because that would have huge security benefits to the overall system.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On Sat, Dec 17, 2016 at 8:50 AM, John Moehrke <<u><span style='color:blue'>johnmoehrke@gmail.com</span></u>> wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian,<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>I am not as grumpy as you on the topic of Identity Federation. It is far too soon to declare it a failure. I reject your assertion that it is a failure.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>I use OpenID Connect identity federation on about 30% of the sites that I use. I know that my 90 year old mother uses it as well, she doesn't even know it.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>If I was to look for evidence of a failure of OpenID Connect federation, that failure would fall upon the RS that have not given the choice to their customers/users/clients. This<br><br>problem is NOT going to be solved by Yet-Another-AuthN. Controlling these RS is not going to happen because some organization like HEART give them Yet-Another-AuthN solution. That might get better if regulated, but I am sure that would get screwed up (I am<br><br>grumpy about regulated solutions).<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>We all want the perfect world today, right now. <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>I am very much not convinced of the effecacy of Block-Chain as a solution for this problem. Block-Chain core capabilities have nothing to do with this problem. Block-Chain is reliant<br><br>on users protecting their private key in proprietary ways. Yes it has identities that can be very close to pseudonymous, but so does most other AuthN solutions. Block-Chain core uses today enable the users to keep that identity secret. It is the very use<br><br>of an identity to carry out some specific purpose that exposes a binding to a real identity. Even bitcoin is showing us that one must be very careful to protect your own identity behind that opaque identifier. Any binding can be kept as thin and broad as<br><br>possible. However when it comes time for a clinician to make medical decisions, that binding (even just local) becomes strong.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>John<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span style='color:#888888'><a href="http://nate-trust.org" target="_blank"><span style='color:#888888;text-decoration:none'><br clear=all></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='color:#888888'><a href="http://nate-trust.org" target="_blank"><span style='color:#888888;text-decoration:none'>John Moehrke</span><span style='color:#888888;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:#888888;text-decoration:none'>Principal Engineering Architect: Standards - Interoperability, Privacy, and Security</span></span><span style='color:#888888;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:#888888;text-decoration:none'>CyberPrivacy – Enabling authorized communications while respecting Privacy</span></span><span style='color:#888888;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:#888888;text-decoration:none'>M <u><span style='color:blue'>+1 920-564-2067</span></u></span></span><span style='color:#888888;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:#888888;text-decoration:none'><u><span style='color:blue'>JohnMoehrke@gmail.com</span></u></span></span><span style='color:#888888;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:#888888;text-decoration:none'><u><span style='color:blue'>https://www.linkedin.com/in/johnmoehrke</span></u></span></span><span style='color:#888888;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:#888888;text-decoration:none'><u><span style='color:blue'>https://healthcaresecprivacy.blogspot.com</span></u></span></span><span style='color:#888888;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:#888888;text-decoration:none'>"Quis custodiet ipsos custodes?" ("Who watches the watchers?")</span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On Fri, Dec 16, 2016 at 5:05 PM, Adrian Gropper <<u><span style='color:blue'>agropper@healthurl.com</span></u>> wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Yes, this is a problem for both HEART (what Justin is calling guidance, below) and for UMA as evidenced by the presentation / proposal the VA made to UMA yesterday.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>I don't know what the solution is going to be, but it's clear that unless we do something the user experience around FHIR is going to be as random as it today around View / Download /<br><br>Transmit. Has anyone actually tried Transmit?<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='color:#888888'><a href="http://nate-trust.org" target="_blank"><span style='color:#888888;text-decoration:none'>Adrian</span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On Fri, Dec 16, 2016 at 5:52 PM, Justin Richer <<u><span style='color:blue'>jricher@mit.edu</span></u>> wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>If we don't provide a mechanism for resource servers to issue a warning and receive a click-through as part of HEART, then we will force patients to register clients manually through<br><br>a patient portal the same way that you register a client to the Google OAuth API.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></blockquote><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731gmailmsg1><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>I don't know where you're getting this narrative from. The user doesn't manually register clients in the real world, the client developer would.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731gmailmsg1><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>The user doesn't usually interact with the RS directly, so there's not really a good place for the RS to *tell* the user anything. And unless we want to get into divulging user information to the RS (which so far we're not) then mandating<br><br>support of a back channel communication mechanism isn't possible. And if we do want to get there, there's a whole lot of privacy requirements we need to work through.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731gmailmsg1><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>We're still mandating the support of dynamic client registration for HEART (not mandatory to use). The best I believe we can do in HEART is have guidance for the AS (which is interacting with the user) to warn the user that a particular<br><br>client might have been dynamically registered, or its software statement only made certain things available.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=m-6712748603607203731gmailmsg1><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> -- Justin<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On 12/13/2016 1:36 PM, Adrian Gropper wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>The HEART charter is about patient-directed exchange across FHIR APIs. There's no reason to introduce trust federations into HEART, especially since practical trust mechanisms don't<br><br>yet exist. We can imagine that Sequoia, or DirectTrust, or the FDA will start issuing software statements for apps someday but that's what makes trust federations a parking lot issue today.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>What we do know today is HIPAA and the API Task Force output.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>If we don't provide a mechanism for resource servers to issue a warning and receive a click-through as part of HEART, then we will force patients to register clients manually through<br><br>a patient portal the same way that you register a client to the Google OAuth API. The usability of that process is likely to doom HEART.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>What is the alternate proposal from Glen, Aaron, or anyone else:<br><br><br><br><br><br>(1) Is HEART to assume software statements are going to be issued by someone and federated by all RSs so that HIPAA / API Task Force warnings are irrelevant?<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>(2) Is HEART to assume that dynamic client registration occurs without a software statement?<br><br><br><br><br><br>(3) ?<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On Tue, Dec 13, 2016 at 10:34 AM, Aaron Seib <<u><span style='color:blue'>aaron.seib@nate-trust.org</span></u>> wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>Regardless – I think that Glen’s assertion that HEART’s plate runneth over is</span><span style='color:#1F497D;text-decoration:none'><br><br>a valid one and this specific aspect is best tabled.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>Are you disagreeing with him or just stating you’re policy position?</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>Aaron Seib, CEO</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>@CaptBlueButton</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> (o)</span><span style='color:#1F497D;text-decoration:none'><br><br><u><span style='color:blue'>301-540-2311</span></u></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'>(m)</span><span style='color:#1F497D;text-decoration:none'><br><br><u><span style='color:blue'>301-326-6843</span></u></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><image003.jpg></span></span><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><a href="http://nate-trust.org" target="_blank"><span style='color:#1F497D;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>From:</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br>Openid-specs-heart [mailto:<u><span style='color:blue'>openid-specs-heart-bounces@lists.openid.net</span></u>]</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br></span><span style='color:windowtext;text-decoration:none'>On Behalf Of </span><span style='color:windowtext;font-weight:normal;text-decoration:none'>Adrian Gropper</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Sent:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Tuesday, December 13, 2016 10:06 AM</span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>To:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Glen Marshall [SRS]</span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Cc:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Josh Mandel; Grahame Grieve; <u><span style='color:blue'><br><br></span></u><u><span style='color:blue'>openid-specs-heart@lists.openid.net</span></u></span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Subject:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Re: [Openid-specs-heart] FHIR Client Registration is the existential issue for HEART</span></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;font-weight:normal;text-decoration:none'><o:p></o:p></span></a></span></b></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>The experiment to fragment the address space into trusted and untrusted clients has been tried many times starting with Markle Common Framework, NHIN, state HIEs, and DirectTrust. There's<br><br>a reason the HEART charter says "build, run, or outsource."<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Patients and physicians need a system where trust is rooted in people, not institutions.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>On Tue, Dec 13, 2016 at 8:52 AM, Glen Marshall [SRS] <<u><span style='color:blue'>gfm@securityrs.com</span></u>> wrote:<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>I prefer this be a parking lot issue for HEART. We have enough on our plate to deliver a profile for the core HEART functions. The API Task Force recommendations do not have the<br><br>force of current regulations. I expect a marketplace solution for them, outside of HEART, should the recommendations find their way into regulations.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:11.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Glen F. Marshall</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Consultant</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Security Risk Solutions, Inc.</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>698 Fishermans Bend</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Mount Pleasant, SC 29464</span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Tel:</span><span style='color:windowtext;text-decoration:none'><br><br><u><span style='color:blue'>(610) 644-2452</span></u> </span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Mobile:</span><span style='color:windowtext;text-decoration:none'><br><br><u><span style='color:blue'>(610) 613-3084</span></u></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><u><span style='color:blue'>gfm@securityrs.com</span></u></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><span style='font-size:10.0pt;font-family:"Helvetica","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><u><span style='color:#0563C1'>www.SecurityRiskSolutions.com</span></u></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none'><o:p></o:p></span></a></span></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span class=gmailmsg><b><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>From:</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br>Openid-specs-heart [mailto:<u><span style='color:blue'>openid-specs-heart-bounces@lists.openid.net</span></u>]</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br></span><span style='color:windowtext;text-decoration:none'>On Behalf Of </span><span style='color:windowtext;font-weight:normal;text-decoration:none'>Adrian Gropper</span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Sent:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Monday, December 12, 2016 20:03</span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>To:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> <u><span style='color:blue'><br><br></span></u><u><span style='color:blue'>openid-specs-heart@lists.openid.net</span></u>; Josh Mandel <<u><span style='color:blue'>jmandel@gmail.com</span></u>>; Justin P Richer <<u><span style='color:blue'>jricher@mit.edu</span></u>></span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Cc:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> Grahame Grieve <<u><span style='color:blue'>grahame@healthintersections.com.au</span></u>></span></span><span style='color:windowtext;font-weight:normal;text-decoration:none'><br><br><br></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;text-decoration:none'>Subject:</span></span><span class=m-6712748603607203731gmailmsg><span style='color:windowtext;font-weight:normal;text-decoration:none'> [Openid-specs-heart] FHIR Client Registration is the existential issue for HEART</span></span><span style='font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;font-weight:normal;text-decoration:none'><o:p></o:p></span></a></span></b></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>This summer's API Task Force had, arguably, only one major conclusion:<br><br><br><br><br><br><br><br><b>"A Resource Server can warn a patient if the RS believes that a client requesting patient-directed exchange is un-trusted AND the patient can choose to click-through that warning and grant access to the resource anyway."</b><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>The API Task Force acknowledged situations where an RS could still block a client but these are limited to denial of service attacks and other threats against the integrity of _other_<br><br>patients' data on a system.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>There are efforts now underway to establish trust audits for FHIR clients which could be presented as part of a "software statement" in order to avoid the API Task Force warning.<br><br><br><br><br><br>Regardless of whether these software statement efforts are successful and can be used to bypass the the API Task Force "warning", HEART has to deal with the API Task Force outcome and profile how a warning is issued when a patient-specified client does not<br><br>come with a "trusted" software statement.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>As far as I can tell, the only way for HEART to enable the API Task Force conclusion is for us to specify a way for the RS to communicate the "warning" to the AS when a software statement<br><br>is deemed inadequate by the RS AND to accept a "click-through" message back from the AS.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>As an alternative, the RS could bypass the AS and send the warning directly to the resource owner and expect a direct reply by secure message or via the patient portal that was<br><br>used to register the resource with the AS in the first place. This alternative does not involve either HEART or UMA and could be considered a parking lot issue.<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian<o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br><br clear=all><br><br><br><br><br>-- <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian Gropper MD<br><br><br><br><br><br></span><span class=gmailmsg><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'>PROTECT YOUR FUTURE - RESTORE Health Privacy!</span></span><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'><br><br><br><span class=m-6712748603607203731gmailmsg>HELP us fight for the right to control personal health data.</span><br><br><br><span class=m-6712748603607203731gmailmsg>DONATE: <u><span style='color:blue'><br><br></span></u><span class=gmailmsg><u><span style='color:#0563C1'>http://patientprivacyrights.org/donate-2/</span></u></span></span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br><br clear=all><br><br><br><br><br>-- <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian Gropper MD<br><br><br><br><br><br></span><span class=gmailmsg><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'>PROTECT YOUR FUTURE - RESTORE Health Privacy!</span></span><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'><br><br><br><span class=m-6712748603607203731gmailmsg>HELP us fight for the right to control personal health data.</span><br><br><br><span class=m-6712748603607203731gmailmsg>DONATE: <u><span style='color:blue'><br><br></span></u><span class=gmailmsg><u><span style='color:#0563C1'>http://patientprivacyrights.org/donate-2/</span></u></span></span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><pre><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>_______________________________________________<o:p></o:p></span></a></pre><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><pre><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Openid-specs-heart mailing list<o:p></o:p></span></a></pre><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><pre><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><u><span style='color:blue'>Openid-specs-heart@lists.openid.net</span></u><o:p></o:p></span></a></pre><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><pre><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><u><span style='color:blue'>http://lists.openid.net/mailman/listinfo/openid-specs-heart</span></u><o:p></o:p></span></a></pre><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></blockquote><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br><br clear=all><br><br><br><br><br>-- <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian Gropper MD<br><br><br><br><br><br></span><span class=gmailmsg><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'>PROTECT YOUR FUTURE - RESTORE Health Privacy!</span></span><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'><br><br><br><span class=m-6712748603607203731gmailmsg>HELP us fight for the right to control personal health data.</span><br><br><br><span class=m-6712748603607203731gmailmsg>DONATE: <u><span style='color:blue'><br><br></span></u><span class=gmailmsg><u><span style='color:#0563C1'>http://patientprivacyrights.org/donate-2/</span></u></span></span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br>_______________________________________________<br><br><br>Openid-specs-heart mailing list<br><br><br><u><span style='color:blue'>Openid-specs-heart@lists.openid.net</span></u><br><br><br><u><span style='color:blue'>http://lists.openid.net/mailman/listinfo/openid-specs-heart</span></u><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br><br clear=all><br><br><br><br><br>-- <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian Gropper MD<br><br><br><br><br><br></span><span class=gmailmsg><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'>PROTECT YOUR FUTURE - RESTORE Health Privacy!</span></span><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'><br><br><br><span class=m-6712748603607203731gmailmsg>HELP us fight for the right to control personal health data.</span><br><br><br><span class=m-6712748603607203731gmailmsg>DONATE: <u><span style='color:blue'><br><br></span></u><span class=gmailmsg><u><span style='color:#0563C1'>http://patientprivacyrights.org/donate-2/</span></u></span></span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></blockquote><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br><br clear=all><br><br><br><br><br>-- <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian Gropper MD<br><br><br><br><br><br></span><span class=gmailmsg><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'>PROTECT YOUR FUTURE - RESTORE Health Privacy!</span></span><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'><br><br><br><span class=m-6712748603607203731gmailmsg>HELP us fight for the right to control personal health data.</span><br><br><br><span class=m-6712748603607203731gmailmsg>DONATE: <u><span style='color:blue'><br><br></span></u><span class=gmailmsg><u><span style='color:#0563C1'>http://patientprivacyrights.org/donate-2/</span></u></span></span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>_______________________________________________<br><br><br>Openid-specs-heart mailing list<br><br><br><u><span style='color:blue'>Openid-specs-heart@lists.openid.net</span></u><br><br><br><u><span style='color:blue'>http://lists.openid.net/mailman/listinfo/openid-specs-heart</span></u><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></blockquote><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><br><br><br><br clear=all><br><br><br><br><br>-- <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'> <o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'>Adrian Gropper MD<br><br><br><br><br><br></span><span class=gmailmsg><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'>PROTECT YOUR FUTURE - RESTORE Health Privacy!</span></span><span style='font-family:"Arial","sans-serif";color:#1F497D;text-decoration:none'><br><br><br><span class=m-6712748603607203731gmailmsg>HELP us fight for the right to control personal health data.</span><br><br><br><span class=m-6712748603607203731gmailmsg>DONATE: <u><span style='color:blue'><br><br></span></u><span class=gmailmsg><u><span style='color:#0563C1'>http://patientprivacyrights.org/donate-2/</span></u></span></span></span><span style='color:windowtext;text-decoration:none'><o:p></o:p></span></a></p><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></blockquote><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="http://nate-trust.org" target="_blank"><span style='color:windowtext;text-decoration:none'><o:p> </o:p></span></a></p></div></div></blockquote></div></div></div></body></html>