[Openid-specs-risc] Subject "categories" discussion

[Atul Tulshibagwale]

Hi all,
In the OpenID SSE WG call on July 21st, we discussed at length the need for
the "subject category" addition to the subject identifier. The notes from
that call are here
<https://docs.google.com/document/d/1ZFwJJDwwSBNKX35VObClC1ctMbMMuHJtr5qY-7xsLW8/edit?usp=sharing>
.

Based on that discussion I would like to propose the following changes in
the SSE profile draft and the proposed SSE Event Types draft:

   1. We drop the common claim named "category" from the subject
   identifiers.
   2. We specify in the SSE profile spec that individual events may have
   multiple subject-identifiers if required to disambiguate the subject as
   being in a specific category. The semantics of combining multiple subject
   identifiers within an event will always be "AND", i.e. The subject of the
   event is identified by the intersection of the subjects identified by each
   subject identifier.
   3. In the proposed SSE event types spec, where required, we specify the
   multiple subject identifiers.

Please respond here to discuss. This is relevant to the finalization of the
subject identifiers specification in the IETF. I will post a message there
based on the conclusion of any discussion here and in our next SSE WG call
on 8/4.

Thanks,
Atul
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-risc/attachments/20200731/95bbbf64/attachment.html>