<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial" size="2"><span style="font-size:10pt;">
<div>Dear all,</div>
<div>Please find below the preliminary notes of our call on Feb 8<font size="1"><span style="font-size:6.65pt;"><sup>th</sup></span></font> 2017</div>
<div>Any error or misunderstanding, please let me know</div>
<div> </div>
<div><u>Participants:</u> John, Charles, Nicolas, Bjorn, Siva, Philippe</div>
<ol style="margin:0;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;"><u>Agenda</u><u> </u><u>:</u></li></span></font>
</ol>
<ol style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Evidence of consent [Ref: Axel e-mail from Jan. 17] </li><li style="margin-top:5pt;margin-bottom:5pt;">Account Porting updates/discussion [Siva]</li><li style="margin-top:5pt;margin-bottom:5pt;">Mobile Connect Access Token retrieval in Back Channel invocation discussion status [Siva]</li><li style="margin-top:5pt;margin-bottom:5pt;">Next MODRNA-CPAS workshop [Bjorn]</li></span></font>
</ol>
<div style="margin-top:5pt;margin-bottom:5pt;"><u>Discussion:</u></div>
<ol style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Evidence of consent [Ref: Axel e-mail from Jan. 17] </li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">No discussion on the list, this subject is considered as a less priority from CPAS</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="2" style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Account Porting updates/discussion </li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">For Mobile Connect, the last spec is sufficient. However, it’s asked from editor (James Manger) to attend CPAS and make a brief presentation of the doc.</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Bjorn to start the implementers draft process, </li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">some comments can be provided during the public review.</span></font></div>
<div>Bjorn to check with James the last spec status.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="3" style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;">
<li>Mobile Connect Access Token retrieval in Back Channel invocation discussion status</li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>From CPAS group, the collection of MNO opinions has started. It’s wishable to gain progress in the discussions, topic still open in CPAS.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Charles started a discussion on the mailing list about Orange proposal, shared in CPAS.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">The proposal is how to get an access token in Back Channel (BC) mode, taking into consideration that any MNO can enforce live user consent or not . When not, this means the consent has been collected
Out of Band.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Discussion then leads to consider new grant type, asynchronous mode, signed JWT assertions. Response from the OP to the SP could be a refresh token or any artifact to poll with.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Other groups in OIF can be interested in, spec to be addressed in MODRNA.</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>John to write a summary of his proposal and provide it to the list, describing new grant type based on signed JWT assertion</li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Discussion about security concerns in OAuth2.0 workgroup, published by blackHat last summer. First approach considers implementation methods rather than protocol adaptations, discussed in OAuth
WorkGroup.</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>SIVA to provide<font color="#1F497D"> </font>more information about Black Hat diffusion.</li></span></font>
</ul>
<ol start="4" style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2" color="#1F497D"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Next MODRNA-CPAS workshop [Bjorn]</li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Verizon could host in Netherlands. Bjorn to see if acceptable.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Placeholder to put on May 11<font size="1"><span style="font-size:7.3pt;"><sup>th</sup></span></font> and 12<font size="1"><span style="font-size:7.3pt;"><sup>th</sup></span></font> 2017</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Kind regards,</div>
<div>Philippe</div>
<div> </div>
<div> </div>
<div style="text-indent:-18pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div style="text-indent:-18pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
</span></font>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>