[Openid-specs-mobile-profile] MODRNA WG call on Sept 3rd 2019 preliminary minutes

[philippe.clement at orange.com]

Dear all,

Please find hereunder the minutes of our MODRNA call on Sept 3rd 2019.
Let me know of any error or misunderstanding.

Roll Call (extract from gotomeeting)
Bjorn Hjelm (Verizon), John Bradley, Philippe Clement (Orange), Joseph Heenan, Petteri (Ubisecure), Torsten Lodderstedt (yes.com), Mr Engan

Adoption of the Agenda [Bjorn/John]
agreed

Working Group Updates

  FAPI WG [Dave]
FAPI CIBA spec was approved. Certification documentation available here: https://openid.net/certification/instructions/

Spec. Status

  MODRNA CIBA Profile [Dave/Gonzalo/Axel]

Issue Tracker
*       CIBA Core<https://bitbucket.org/openid/mobile/issues?status=new&status=open&component=CIBA> (Post-Implementer's Draft) [Dave/Brian/Gonzalo/Axel]

#152: Guidance around verification of ownership of keys at jwks_uri for PPID<https://bitbucket.org/openid/mobile/issues/152/guidance-around-verification-of-ownership>
Torsten confirms his comments
==>     Dave to write some text before next call

#156: Possible oddity in token endpoint http status code for 'access_denied' error<https://bitbucket.org/openid/mobile/issues/156/possible-oddity-in-token-endpoint-http>
==>     Bjorn to send a reminder to people supposed to add text

#154: CIBA - Long Polling<https://bitbucket.org/openid/mobile/issues/154/ciba-long-polling>
Associated with 136. As soon as 136 is closed, 154 can be closed too.

#136: "interval" and "slow_down" may not give the OP enough control<https://bitbucket.org/openid/mobile/issues/136/interval-and-slow_down-may-not-give-the-op>
Pull request under work, Petteri added text

#151: Define authentication device before first use<https://bitbucket.org/openid/mobile/issues/151/define-authentication-device-before-first>
==>     To be closed after Dave comment

#91: CIBA: Authentication request and context parameters<https://bitbucket.org/openid/mobile/issues/91/ciba-authentication-request-and-context>
Pull request 63. Was a typo, Dave fixed it.
==>     To be closed

#150: should auth_req_id have limits on allowable characters?<https://bitbucket.org/openid/mobile/issues/150/should-auth_req_id-have-limits-on>
==>     Joseph to have a look at pull request, to be closed then

#135: token endpoint response when client polls quicker than 'interval' may be unclear<https://bitbucket.org/openid/mobile/issues/135/token-endpoint-response-when-client-polls>
==>     Agreed on a resolution, then to be closed

#85: CIBA: Notifying the Client when a user fails to authenticate<https://bitbucket.org/openid/mobile/issues/85/ciba-notifying-the-client-when-a-user>
==>     Waiting for a pull request

*       MODRNA CIBA Profile<https://bitbucket.org/openid/mobile/issues?status=new&status=open&component=MODRNA%20Profile%20CIBA>  [Dave/Gonzalo/Axel]

#97: CIBA - Clarify privacy issues with login_hint_token and discovery service<https://bitbucket.org/openid/mobile/issues/97/ciba-clarify-privacy-issues-with>
==>     Dave to add text


Best regards,
Philippe


_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-mobile-profile/attachments/20190903/3ee25cfd/attachment.html>