<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div style="font-family:sans-serif"><div style="white-space:normal"><p dir="auto">This is excellent. My only comment is in relation to section 10, "Privacy Consideration":</p>
<p dir="auto">The document notes: "OP and RP MUST establish a legal basis before exchanging any personally identifiable information."</p>
<p dir="auto">Does membership in a multilateral federation, where both parties have signed a participation agreement with the federation (but not each other) constitute a legal basis for the exchange? What about a situation where an OP is in one federation, and has signed its participation agreement, the RP is in another federation, and has signed its participation agreement, and the operators of both federations have signed an interfederation agreement with a party such as eduGAIN?</p>
<p dir="auto">Thank you,</p>
<p dir="auto">Nick</p>
<p dir="auto">On 8 May 2019, at 8:34, Torsten Lodderstedt wrote:</p>
</div>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><div id="31BD0213-7E9A-44D2-8B8D-15162967ED23"><div dir="auto"><div dir="ltr"></div><div dir="ltr">Sounds good ;-)</div><div dir="ltr"><br></div><div dir="ltr">Look forward to getting you feedback.</div><div dir="ltr"><br></div><div dir="ltr">@Roland: thanks for your announcement.</div><div dir="ltr"><br>Am 08.05.2019 um 16:11 schrieb Nick Roy <<a href="mailto:nroy@internet2.edu">nroy@internet2.edu</a>>:<br><br></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div style="font-family:sans-serif">
<div style="white-space:normal">
<p dir="auto">Thanks! I talked with Torsten about this at IIW last fall, glad to see it moving along. I will review.</p>
<p dir="auto">Best,</p>
<p dir="auto">Nick</p>
<p dir="auto">On 8 May 2019, at 1:36, Roland Hedberg wrote:</p>
</div>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<div id="219D154B-99B4-4914-BFD7-B35593F8FBD6">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Hi!
<div class=""><br class="">
</div>
<div class="">For those who have missed the announcement.</div>
<div class=""><br class="">
</div>
<div class="">From the abstract:</div>
<div class=""><br class="">
</div>
<div class=""><font size="2" class="">"This specification defines an extension of OpenID Connect for providing Relying Parties with verified person data. </font></div>
<div class=""><font size="2" class="">This extension is intended to be used to verify the identity of a person in compliance with a certain law."</font></div>
<div class=""><span style="font-family: verdana, helvetica, arial, sans-serif; font-size: 13.333333015441895px;" class=""><br class="">
</span></div>
<div class=""><a href="https://openid.net/specs/openid-connect-4-identity-assurance-02.html" class="">https://openid.net/specs/openid-connect-4-identity-assurance-02.html</a></div>
<div class=""><br class="">
<div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">
— Roland</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">
Scratch a pessimist and you find often a defender of privilege. -William Beveridge, economist and reformer (5 Mar 1879-1963) </div>
</div>
<br class="">
</div>
</div>
</div>
</blockquote>
<div style="white-space:normal">
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
</blockquote>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<p dir="auto">-- <br>
openid-specs-rande mailing list<br>
<a href="mailto:openid-specs-rande@lists.openid.net">openid-specs-rande@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-rande" style="color:#777">http://lists.openid.net/mailman/listinfo/openid-specs-rande</a></p>
</blockquote>
</div>
</div>
</div></blockquote><blockquote type="cite"><div dir="ltr"><span>-- </span><br><span>openid-specs-rande mailing list</span><br><span><a href="mailto:openid-specs-rande@lists.openid.net">openid-specs-rande@lists.openid.net</a></span><br><span><a href="http://lists.openid.net/mailman/listinfo/openid-specs-rande">http://lists.openid.net/mailman/listinfo/openid-specs-rande</a></span><br></div></blockquote></div></div></blockquote>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
</blockquote></div>
</div>
</body>
</html>