<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Times New Roman" size="3"><span style="font-size:12pt;"><a name="BM_BEGIN"></a>
<div><font face="Calibri" size="2"><span style="font-size:10pt;">Dear all,</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:10pt;">Please find below the preliminary minutes of our MODRNA call on April 16<font size="1"><span style="font-size:6.65pt;"><sup>th</sup></span></font> 2019. </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:10pt;">In case of error or misunderstanding, please let me know.</span></font></div>
<div style="margin-top:24pt;"><font face="Cambria" size="4" color="#365F91"><span style="font-size:14pt;"><b>Roll Call</b><font color="black"><b> </b></font><font face="Calibri" size="2" color="black"><span style="font-size:11pt;"><b>(extract from gotomeeting
list)</b></span></font></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Bjorn Hjelm (Verizon), Dave.Tonge (Moneyhub), Philippe Clement (Orange), Brian Campbell, Petteri (Ubisecure), Geoffrey Graham, Julie Maas</span></font></div>
<div style="margin-top:24pt;"><font face="Cambria" size="4" color="#365F91"><span style="font-size:14pt;"><b>Adoption of the Agenda [Bjorn/John]</b></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Agenda agreed</span></font></div>
<div style="margin-top:24pt;"><font face="Cambria" size="4" color="#365F91"><span style="font-size:14pt;"><b>External Organizations</b></span></font></div>
<div style="margin-top:10pt;padding-left:14.2pt;"><font face="Cambria" size="3" color="#4F81BD"><span style="font-size:13pt;"><b>GSMA [Siva]</b></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Not addressed</span></font></div>
<div style="margin-top:24pt;"><font face="Cambria" size="4" color="#365F91"><span style="font-size:14pt;"><b>Working Group Updates</b></span></font></div>
<div style="margin-top:10pt;padding-left:14.2pt;"><font face="Cambria" size="3" color="#4F81BD"><span style="font-size:13pt;"><b>FAPI WG [Dave]</b></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">FAPI WG is unlocking issues for FAPI / CIBA. </span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Extra meetings or intermediate calls may happen</span></font></div>
<div style="margin-top:24pt;"><font face="Cambria" size="4" color="#365F91"><span style="font-size:14pt;"><b>Spec. Status</b></span></font></div>
<div style="margin-top:10pt;padding-left:14.2pt;"><font face="Cambria" size="3" color="#4F81BD"><span style="font-size:13pt;"><b>MODRNA CIBA Profile [Dave/Gonzalo/Axel]</b></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Update from Dave</span></font></div>
<div style="margin-top:10pt;padding-left:14.2pt;"><font face="Cambria" size="3" color="#4F81BD"><span style="font-size:13pt;"><b>Authentication Profile [Joerg]</b></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Not addressed</span></font></div>
<div style="margin-top:24pt;"><font face="Cambria" size="4" color="#365F91"><span style="font-size:14pt;"><b>Issue Tracker</b></span></font></div>
<div style="margin-top:10pt;padding-left:14.2pt;"><font face="Cambria" size="3" color="#4F81BD"><span style="font-size:13pt;"><a href="https://bitbucket.org/openid/mobile/issues?status=new&status=open&component=MODRNA%20Profile%20CIBA"><font color="blue"><b><u>MODRNA
CIBA Profile</u></b></font></a><font color="#1F497D"><b> [Dave/Gonzalo/Axel]</b></font></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;"><a href="https://bitbucket.org/openid/mobile/issues/97/ciba-clarify-privacy-issues-with"><font face="Segoe UI" size="2" color="#172B4D"><span style="font-size:10.5pt;"><u>#97: CIBA - Clarify privacy
issues with login_hint_token and discovery service</u></span></font></a></span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Dave to look at and make a proposal</span></font></div>
<ul style="margin:0;">
<font face="Arial" size="2"><span style="font-size:10pt;">
<li style="margin-top:5pt;margin-bottom:5pt;"> </li></span></font>
</ul>
<div style="margin-top:10pt;padding-left:14.2pt;"><font face="Cambria" size="3" color="#4F81BD"><span style="font-size:13pt;"><a href="https://bitbucket.org/openid/mobile/issues?status=new&status=open&component=CIBA"><font color="blue"><b><u>CIBA Core</u></b></font></a><font color="#1F497D"><b>
(Post-Implementer’s Draft) [Dave/Brian/Gonzalo/Axel]</b></font></span></font></div>
<ul style="margin:0;">
<font face="Arial" size="2"><span style="font-size:10pt;">
<li style="margin-top:5pt;margin-bottom:5pt;"> </li><li style="margin-top:5pt;margin-bottom:5pt;"><a href="https://bitbucket.org/openid/mobile/issues/136/interval-and-slow_down-may-not-give-the-op"><font face="Segoe UI" size="2" color="#172B4D"><span style="font-size:10.5pt;"><u>#136: "interval" and "slow_down"
may not give the OP enough control</u></span></font></a></li><li style="margin-top:5pt;margin-bottom:5pt;">Interval between the last response and the next request is at stake. </li><li style="margin-top:5pt;margin-bottom:5pt;">Petterri mentions several scenario, like short polling or long polling. And the client would have to know if the AS implemented short or long polling.</li><li style="margin-top:5pt;margin-bottom:5pt;">Petteri mentions existing implementations of these kinds of polling. Have a note that the client be prepared to short or long polling ?. We can add a note/clarification.</li></span></font>
</ul>
<ul style="margin:0;padding-left:36pt;">
<font face="Arial" size="2"><span style="font-size:10pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Petteri to prepare a text for this issue.</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;"><a href="https://bitbucket.org/openid/mobile/issues/135/token-endpoint-response-when-client-polls"><font face="Segoe UI" size="2" color="#172B4D"><span style="font-size:10.5pt;"><u>#135:
token endpoint response when client polls quicker than 'internal' may be unclear</u></span></font></a></span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;">Do we need a special error code ? Brian thinks it’s not necessary.</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Arial" size="2"><span style="font-size:10pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Bjorn to reach out to Joseph for this issue.</li></span></font>
</ul>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;"><a href="https://bitbucket.org/openid/mobile/issues/152/guidance-around-verification-of-ownership"><font face="Segoe UI" size="2" color="#172B4D"><span style="font-size:10.5pt;"><u>#152:
Guidance around verification of ownership of keys at jwks_uri for PPID</u></span></font></a></span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;">Discussion kept open</span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;">Best regards,</span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;">Philippe</span></font></div>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Arial" size="2"><span style="font-size:10pt;"> </span></font></div>
</span></font>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>