[Openid-specs-risc] Agenda for today's RISC call at 3pm PDT

[Adam Dawes]

April 11

Attendees

Adam Dawes, John Bradley, Mark Risher, Adam Migus, Anton Taborszky, Brad
Hill,  Dale Olds, Henrik Biering

Agenda

   -

   Google sharing agreement update
   -

      Have draft agreement, going through redlines
      -

      Group thought it would slow things down a lot to have agreement
      extend beyond security use cases.
      -

      When available we’ll open up to others so that we can start sharing
      info with them.
      -

   Results from early experiments
   -

      Really good results so far. Depending on selection criteria, see up
      to 20% hit rate. This is orders of magnitude better than any
other signals
      we’re working off of.
      -

      Data analysis is hard. Different event semantics, different log time
      lines. Lots of forensics.
      -

      Timing does seem to matter. Saw some events on 2nd provider happening
      in as little at 7 minutes.
      -

      Started with objective things. Algorithms determined bad thing
      happened and we locked out account.
      -

      Next steps: 1) do another batch 2) Have sessions at IIW and CIS.
      -

   Identity event token spec
   <http://www.ietf.org/id/draft-hunt-idevent-token-01.txt>
   -

      Basically just a spec on how to put events into tokens.
      -

      Got agreement to use this form with OpenID Connect logout spec.
      -

      Not specific about transport.
      -

      Supports additional meta data about an event.
      -

      Will have to watch out for different groups defining the same
      semantic event: both scim and risc have talked about the recycled account
      case.


On Mon, Apr 11, 2016 at 12:05 PM, Phil Hunt (IDM) <phil.hunt at oracle.com>
wrote:

> Apologies I can not make it. Still enroute back from Argentina.
>
> Very interested in this.
>
> Phil
>
> On Apr 11, 2016, at 11:59, Adam Dawes <adawes at google.com> wrote:
>
> Hi all,
>
> Wanted to get together today to provide updates and discussion.
>
>    - Google sharing agreement update
>    - Results from early experiments
>    - Identity event token spec
>    <http://www.ietf.org/id/draft-hunt-idevent-token-01.txt>
>
>
> 1.  Please join my meeting.
> https://global.gotomeeting.com/join/576653581
>
> 2.  Use your microphone and speakers (VoIP) - a headset is recommended.
> Or, call in using your telephone.
>
> United States: +1 (312) 757-3119
> Australia: +61 2 9091 7603
> Austria: +43 (0) 7 2088 0716
> Belgium: +32 (0) 28 08 4372
> Canada: +1 (647) 497-9380
> Denmark: +45 (0) 69 91 84 58
> Finland: +358 (0) 931 58 1773
> France: +33 (0) 170 950 590
> Germany: +49 (0) 692 5736 7300
> Ireland: +353 (0) 15 133 006
> Italy: +39 0 699 26 68 65
> Netherlands: +31 (0) 208 080 759
> New Zealand: +64 9 974 9579
> Norway: +47 21 04 30 59
> Spain: +34 931 76 1534
> Sweden: +46 (0) 852 500 691
> Switzerland: +41 (0) 435 0026 89
> United Kingdom: +44 (0) 20 3713 5011
>
> Access Code: 576-653-581
> Audio PIN: Shown after joining the meeting
>
> Meeting ID: 576-653-581
>
> --
> Adam Dawes | Sr. Product Manager | adawes at google.com | +1 650-214-2410
>
> _______________________________________________
> Openid-specs-risc mailing list
> Openid-specs-risc at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-risc
>
>


-- 
Adam Dawes | Sr. Product Manager | adawes at google.com | +1 650-214-2410
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-risc/attachments/20160411/65d6c311/attachment.html>