[Openid-specs-igov] 7th March call follow-up

[Giovanni Bartolomeo]

Dear All,

it has been my pleasure to take part at last iGOV call on the 7th  
March. Thanks to Giuseppe for inviting me and to John and Nat for the  
welcome.

I mentioned that, as part of our effort on introducing  
nonsignature-based proof, we have developed an automated (with some  
limitations and caveats, of course) methodology for checking formal  
correctness of OAuth2.0 variants.

A summary is reported in Section 3 of my paper:

https://www.techrxiv.org/articles/preprint/Attribute-Based_Encryption_for_Access_Control_in_Cloud_Ecosystems/13546871

I'll be happy to provide a brief demo in the future if this WG is  
interested - also in relation to the issue (#32) "PKCE + request  
object signature as recommeded option" I posted few weeks ago.

Thanks.

Best Regards,
Giovanni



-- 
Giovanni Bartolomeo