[Openid-specs-igov] iGov reminder: Jan 7 WG meeting and final PR for iGov OAuth 2.0 profile

[Tom Clancy]

WG members, reminder of WG meeting tomorrow at 11am ET.



https://zoom.us/j/94531370713?pwd=eFVLOTZOVHFRUU1rSmZjdStyVm5zZz09; Meeting ID: 945 3137 0713; Passcode: 160334



If after WG discussion there is no objection to PR#41, we'll plan to merge it and initiate Working Group Review of the iGov OAuth 2.0 profile.



Thank you!

Tom and Kelley, editors



From: Openid-specs-igov <openid-specs-igov-bounces at lists.openid.net> On Behalf Of Tom Clancy via Openid-specs-igov
Sent: Tuesday, December 17, 2024 11:47 AM
To: iGov List (openid-specs-igov) <openid-specs-igov at lists.openid.net>
Subject: [EXT] [Openid-specs-igov] iGov status: Dec 10 WG actions and final PR for iGov OAuth 2.0 profile



WG members: The iGov call on Tuesday December 10 was very productive.



1. PR#40 was merged and the "small-fixes" branch is now PR#41. openid / igov / Pull Request #41: Final PR for OAuth 2.0 before WG review - Bitbucket<https://bitbucket.org/openid/igov/pull-requests/41>



2. Excellent WG discussion led by John Bradley on cipher suites in general and on profile support for implementers that need to address PQ safe requirements. Your attention is invited to the permissive language for leveraging adopted PQ safe solutions prior to their inclusion in BCP195.

The permissive language is added in this commit: openid / igov / Commit 524f33e1e5a5 - Bitbucket<https://bitbucket.org/openid/igov/commits/524f33e1e5a54339f486ee56364a80a157e3724b>



3. On Slack, Giuseppe called attention to additional considerations that surround PR#41 requirements to leverage the same PKI certificates within http and oauth apps that use mTLS for sender constraining tokens. Issue #55 openid / igov / issues / #55 - [iGov-OAuth] Potential risk of using same certificate for http and OAuth sender-constraint - Bitbucket<https://bitbucket.org/openid/igov/issues/55/igov-oauth-potential-risk-of-using-same> is against PR#41.



Following merge of PR#41, the editors will call for Working Group review.



Thank you!

Tom and Kelley, editors

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-igov/attachments/20250106/57e6aacf/attachment.htm>