<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div dir="ltr"></div><div dir="ltr">Hi Nick,</div><div dir="ltr"><br>Am 10.05.2019 um 23:02 schrieb Nick Roy <<a href="mailto:nroy@internet2.edu">nroy@internet2.edu</a>>:<br><br></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
<div style="font-family:sans-serif"><div style="white-space:normal"><p dir="auto">This is excellent.</p></div></div></div></blockquote><div>Thanks :-)</div><blockquote type="cite"><div dir="ltr"><div style="font-family:sans-serif"><div style="white-space:normal"><p dir="auto"> My only comment is in relation to section 10, "Privacy Consideration":</p>
<p dir="auto">The document notes: "OP and RP MUST establish a legal basis before exchanging any personally identifiable information."</p>
<p dir="auto">Does membership in a multilateral federation, where both parties have signed a participation agreement with the federation (but not each other) constitute a legal basis for the exchange? What about a situation where an OP is in one federation, and has signed its participation agreement, the RP is in another federation, and has signed its participation agreement, and the operators of both federations have signed an interfederation agreement with a party such as eduGAIN?</p></div></div></div></blockquote><div>Ultimately, this question needs to be answered by a lawyer.</div><div><br></div><div>I think in the EU the user would need to agree the the data transfer as well. That could happen via a user consent embedded in the flow or as part of the terms of service with the OP, the user accepts when registering. </div><div><br></div><div>best regards,</div><div>Torsten.</div><blockquote type="cite"><div dir="ltr"><div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">Thank you,</p>
<p dir="auto">Nick</p>
<p dir="auto">On 8 May 2019, at 8:34, Torsten Lodderstedt wrote:</p>
</div>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><div id="31BD0213-7E9A-44D2-8B8D-15162967ED23"><div dir="auto"><div dir="ltr"></div><div dir="ltr">Sounds good ;-)</div><div dir="ltr"><br></div><div dir="ltr">Look forward to getting you feedback.</div><div dir="ltr"><br></div><div dir="ltr">@Roland: thanks for your announcement.</div><div dir="ltr"><br>Am 08.05.2019 um 16:11 schrieb Nick Roy <<a href="mailto:nroy@internet2.edu">nroy@internet2.edu</a>>:<br><br></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div style="font-family:sans-serif">
<div style="white-space:normal">
<p dir="auto">Thanks! I talked with Torsten about this at IIW last fall, glad to see it moving along. I will review.</p>
<p dir="auto">Best,</p>
<p dir="auto">Nick</p>
<p dir="auto">On 8 May 2019, at 1:36, Roland Hedberg wrote:</p>
</div>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<div id="219D154B-99B4-4914-BFD7-B35593F8FBD6">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Hi!
<div class=""><br class="">
</div>
<div class="">For those who have missed the announcement.</div>
<div class=""><br class="">
</div>
<div class="">From the abstract:</div>
<div class=""><br class="">
</div>
<div class=""><font size="2" class="">"This specification defines an extension of OpenID Connect for providing Relying Parties with verified person data. </font></div>
<div class=""><font size="2" class="">This extension is intended to be used to verify the identity of a person in compliance with a certain law."</font></div>
<div class=""><span style="font-family: verdana, helvetica, arial, sans-serif; font-size: 13.333333015441895px;" class=""><br class="">
</span></div>
<div class=""><a href="https://openid.net/specs/openid-connect-4-identity-assurance-02.html" class="">https://openid.net/specs/openid-connect-4-identity-assurance-02.html</a></div>
<div class=""><br class="">
<div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">
— Roland</div>
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">
Scratch a pessimist and you find often a defender of privilege. -William Beveridge, economist and reformer (5 Mar 1879-1963) </div>
</div>
<br class="">
</div>
</div>
</div>
</blockquote>
<div style="white-space:normal">
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
</blockquote>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
<p dir="auto">-- <br>
openid-specs-rande mailing list<br>
<a href="mailto:openid-specs-rande@lists.openid.net">openid-specs-rande@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-rande" style="color:#777">http://lists.openid.net/mailman/listinfo/openid-specs-rande</a></p>
</blockquote>
</div>
</div>
</div></blockquote><blockquote type="cite"><div dir="ltr"><span>-- </span><br><span>openid-specs-rande mailing list</span><br><span><a href="mailto:openid-specs-rande@lists.openid.net">openid-specs-rande@lists.openid.net</a></span><br><span><a href="http://lists.openid.net/mailman/listinfo/openid-specs-rande">http://lists.openid.net/mailman/listinfo/openid-specs-rande</a></span><br></div></blockquote></div></div></blockquote>
<div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px">
</blockquote></div>
</div>
</div></blockquote><blockquote type="cite"><div dir="ltr"><span>-- </span><br><span>openid-specs-rande mailing list</span><br><span><a href="mailto:openid-specs-rande@lists.openid.net">openid-specs-rande@lists.openid.net</a></span><br><span><a href="http://lists.openid.net/mailman/listinfo/openid-specs-rande">http://lists.openid.net/mailman/listinfo/openid-specs-rande</a></span><br></div></blockquote></body></html>