<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Thu, Aug 3, 2017 at 11:12 AM, Phil Hunt <span dir="ltr"><<a href="mailto:phil.hunt@oracle.com" target="_blank" class="cremed">phil.hunt@oracle.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div>Marius,</div><div><br></div><div>I don’t think implying type by receiver works.</div></div></blockquote><div><br></div><div>Type is not implied by receiver at all. The explicit receiver could get both "sub" and "email", but "sub" normally is enough. The implicit receiver knows only "email". The actual claims ('sub" and "email") are well defined, no need for a type claim. It is up to the transmitter to decide what claims to send to what receiver.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div><br></div><div>I am assuming some implementers will have central event receivers and draw conclusions about users that are doing both email federation and explicit connect federation - because it all maps back to a single account.</div></div></blockquote><div><br></div><div>Maybe. In this case the transmitter can send both "sub" and "email".</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div><br></div><div><div><span class=""><div>
<div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div><span class="m_5638927420824936466Apple-style-span" style="border-collapse:separate;line-height:normal;border-spacing:0px"><div style="word-wrap:break-word"><div><div><div>Phil</div><div><br></div><div>Oracle Corporation, Identity Cloud Services Architect & Standards</div><div>@independentid</div><div><a href="http://www.independentid.com" target="_blank" class="cremed">www.independentid.com</a></div></div></div></div></span><a href="mailto:phil.hunt@oracle.com" target="_blank" class="cremed">phil.hunt@oracle.com</a></div></div></div></div></div></div></div></div></div></div></div></div>
</div>
<br></span><div><div class="h5"><div><blockquote type="cite"><div>On Aug 3, 2017, at 11:06 AM, Marius Scurtescu <<a href="mailto:mscurtescu@google.com" target="_blank" class="cremed">mscurtescu@google.com</a>> wrote:</div><br class="m_5638927420824936466Apple-interchange-newline"><div><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Thu, Aug 3, 2017 at 10:59 AM, Phil Hunt <span dir="ltr"><<a href="mailto:phil.hunt@oracle.com" class="m_5638927420824936466cremed cremed" target="_blank">phil.hunt@oracle.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Marius,<div><br></div><div>Agreed with your concerns. I wasn’t clear on why it was useful.</div><div><br></div><div>I suspect in some RISC events, there may be a need to issue the same event for both implicit and explicitly federated users. Thus, in the event, you need to flag the type of user.</div></div></blockquote><div><br></div><div>Right, but then the event would be sent to two different receivers and the actual SET can be custom for each one (the explicit receiver will see a "sub" claim while the implicit receiver will see only an "email" claim). I don't think typ is needed for this case.</div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div><br></div><div>“typ” is also useful if we want a registry so that we don’t end up with different event profiles using different attributes to reference the same thing. E.g. we might want to avoid email being specified with different attributes for the same thing: “mail”, “email”, “rfc822”.</div></div></blockquote><div><br></div><div>Since we cannot mix events from different profiles in the same SET (do we agree on that?), I don't think we need a registry to make claims consistent across profiles.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div><br></div><div><br></div><div><span><div>
<div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div><span class="m_5638927420824936466m_-1824900303268500248Apple-style-span" style="border-collapse:separate;line-height:normal;border-spacing:0px"><div style="word-wrap:break-word"><div><div><div>Phil</div><div><br></div><div>Oracle Corporation, Identity Cloud Services Architect & Standards</div><div>@independentid</div><div><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.independentid.com&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=gx2m90K98jrVRbEau_FzLsvpzeH_u745sOaWA3F0ROc&s=g365KeLvgF7XadltTMU045q4EZpiV_61s9xho_0X3qU&e=" class="m_5638927420824936466cremed cremed" target="_blank">www.independentid.com</a></div></div></div></div></span><a href="mailto:phil.hunt@oracle.com" class="m_5638927420824936466cremed cremed" target="_blank">phil.hunt@oracle.com</a></div></div></div></div></div></div></div></div></div></div></div></div>
</div>
<br></span><div><div class="m_5638927420824936466h5"><div><blockquote type="cite"><div>On Aug 3, 2017, at 10:49 AM, Marius Scurtescu <<a href="mailto:mscurtescu@google.com" class="m_5638927420824936466cremed cremed" target="_blank">mscurtescu@google.com</a>> wrote:</div><br class="m_5638927420824936466m_-1824900303268500248Apple-interchange-newline"><div><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Thu, Aug 3, 2017 at 10:39 AM, Phil Hunt <span dir="ltr"><<a href="mailto:phil.hunt@oracle.com" class="m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">phil.hunt@oracle.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word">yes. Instead of using “sub” you might define an attribute “identity” and it could be used as follows:<div><br></div><div>“identity”:{</div><div> “typ”:”oidc”,</div><div> “sub”:”8100552e17554422b6207b7<wbr>bd7a9bc76”,</div><div> “iss”:”<a href="http://myidp.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">myidp.example.com</a>"</div><div>}</div><div><br></div><div>Or:</div><div><br></div><div>“identity”:{</div><div> “typ”:”scim”,</div><div> “$ref”:”<a href="https://scim.example.com/Users/8100552e17554422b6207b7bd7a9bc76" class="m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://scim.example.c<wbr>om/Users/8100552e17554422b6207<wbr>b7bd7a9bc76</a>”</div><div>}</div><div><br></div><div>Or</div><div><br></div><div>(not sure these are the right claims, but you might include some claims from MODRNA like carrier identifiers if they are available)</div><div>“identity”:{</div><div> “typ”:”phone”,</div><div> “telephoneNumber”:”+1604123456<wbr>7”</div><div> “carrier”: <somevalue> </div><div>}</div><div><br></div><div>“identity”:{</div><div> “typ”:”emails”,</div><div> “mail”:”<a href="mailto:john.doe@example.com" class="m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">john.doe@example.com</a>”</div><div>}</div><div><br></div><div>Note “identity” could be used at the top level or embedded in events payload. Top level if there is need to have multiple event types are expressed at once. Or, if part of the core spec to provide a consistent pattern for identifiers and to establish a registry of identifier types. Regardless at the top level, then “identity” would have to be registered as a JWT claim.</div></div></blockquote><div><br></div><div>This is a separate discussion we should have, I was proposing something different here, but I was trying to focus on the issuer conflict first.</div><div><br></div><div>That being said, I don't see why a typ claim is needed here. We can use the exact same claims as in an Id Token. SCIM needs a different profile than RISC.</div><div><br></div><div>Your examples from above using Id Token claims (minus the SCIM example):</div><div><br></div><div><font face="monospace, monospace">“identity”:{</font></div><div><font face="monospace, monospace"> “sub”:”8100552e17554422b6207b7<wbr>bd7a9bc76”,<br></font></div><div><font face="monospace, monospace"> “iss”:”<a href="http://myidp.example.com/" class="m_5638927420824936466cremed cremed" target="_blank">myidp.example.com</a>"</font></div><div><font face="monospace, monospace">}</font></div><div><font face="monospace, monospace"><br></font></div><div><div><font face="monospace, monospace">“identity”:{</font></div><div><span style="font-family:monospace,monospace"> “phone_number”:”+</span><span style="font-family:monospace,monospace">16041234567”</span><br></div><div><span style="font-family:monospace,monospace">}</span><br></div><div><font face="monospace, monospace"><br></font></div><div><font face="monospace, monospace">“identity”:{</font></div><div><span style="font-family:monospace,monospace"> “email”:”</span><span style="font-family:monospace,monospace"><a href="mailto:john.doe@example.com" class="m_5638927420824936466cremed cremed" target="_blank">john.doe@example.com</a></span><span style="font-family:monospace,monospace">”</span><br></div><div><font face="monospace, monospace">}</font></div></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word"><div><span class="m_5638927420824936466m_-1824900303268500248gmail-"><br><div>
<div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div><span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-style-span" style="border-collapse:separate;line-height:normal"><div style="word-wrap:break-word"><div><div><div>Phil</div><div><br></div><div>Oracle Corporation, Identity Cloud Services Architect & Standards</div><div>@independentid</div><div><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.independentid.com&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=8DgoyHO0bkvBmE7iO1lCEHlfY6qf43cH7pWx3Ekpiow&s=uBPtLJ_OeovXu0GNe8dSZcmX3LYoMrlu_N5HRH_5MQY&e=" class="m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">www.independentid.com</a></div></div></div></div></span><a href="mailto:phil.hunt@oracle.com" class="m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">phil.hunt@oracle.com</a></div></div></div></div></div></div></div></div></div></div></div></div>
</div>
<br></span><div><div class="m_5638927420824936466m_-1824900303268500248gmail-h5"><div><blockquote type="cite"><div>On Aug 3, 2017, at 10:28 AM, Marius Scurtescu <<a href="mailto:mscurtescu@google.com" class="m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">mscurtescu@google.com</a>> wrote:</div><br class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-interchange-newline"><div><div dir="ltr" style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div class="gmail_extra"><div class="gmail_quote">On Thu, Aug 3, 2017 at 9:42 AM, John Bradley<span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span><span dir="ltr"><<a href="mailto:ve7jtb@ve7jtb.com" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">ve7jtb@ve7jtb.com</a>></span><span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>wr<wbr>ote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word">I guess in principal sub could be a dictionary with a val and other meta data like a optional issuer.<div><br></div><div>We do that with sub in <a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__openid.net_specs_openid-2Dconnect-2Dcore-2D1-5F0.html-23IndividualClaimsRequests&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=0XvWuopUa1rUzdTHlWsUVZI7PePtDaGu3VrMUlwE2yU&s=VzfByRviJEJHNZfefEzIWK8KsuPhKsf_RXi6eOTxbeI&e=" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">Connect claims requests</a>.</div><div><br></div><div>However in responses sub is defined in </div><div><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__tools.ietf.org_html_rfc7519-23section-2D4.1.2&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=0XvWuopUa1rUzdTHlWsUVZI7PePtDaGu3VrMUlwE2yU&s=5GZBJpUnQsgSTinzQRg5GLOPDs6YuqtEr_PEMy9JsMQ&e=" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://tools.ietf.org/html/rf<wbr>c7519#section-4.1.2</a> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>as a string.</div><div><br></div><div>One option might be to have a new claim. sub-d that is a dictionary that you could use when you need a more complicated sub with a SubjectNameIdFormat and scope. How could that go wrong:)</div></div></blockquote><div><br></div><div>That is option 3, right?</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word"><div><br></div><div>John B.</div><div><div class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597h5"><div><br></div><div> <br><div><blockquote type="cite"><div>On Aug 3, 2017, at 12:19 PM, Phil Hunt (IDM) <<a href="mailto:phil.hunt@oracle.com" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">phil.hunt@oracle.com</a>> wrote:</div><br class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597m_1134046780769059888Apple-interchange-newline"><div><div dir="auto"><div>Lets not forget that we also have cases where subject is identified by email or telephone or other identifier (implicit fed cases). </div><div><br></div><div>Risc needs to have a subject type attribute to inform parsers how to identify the subject. The next question whether sub gets re-used as a general purpose attribute or whether specific attributes are used for each type (email, telephone). <br><br>In solving this broader requirement the sub/iss problem may also be resolved. </div><div><br>Phil</div><div><br>On Aug 3, 2017, at 1:52 AM, Nat Sakimura <<a href="mailto:sakimura@gmail.com" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">sakimura@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><p dir="ltr">My preference: If all SET only supports a single iss/sub pair, then 1. If a SET can have events for multiple iss/sub pair, then 2.<span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span></p><br><div class="gmail_quote"><div dir="ltr">2017年8月3日(木) 7:49 Marius Scurtescu <<a href="mailto:mscurtescu@google.com" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">mscurtescu@google.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Each SET profile must define or clarify several aspects of the specs. For RISC most of these must only be only specified (like key resolution), but there is at least one issue for which we don't have an agreed on solution.<div><br></div><div>In some use cases the issuer of the SET is different from the issuer of the subject identifier, and at least in those cases there cannot be only one top level "iss" claim.</div><div><br></div><div>Here are the proposals I am aware of to solve this issue:</div><div><br></div><div>1. Move iss+sub to the event level. The drawback of this approach is redundancy when multiple events are present in the SET.</div><div><br></div><div><div><font face="monospace, monospace">{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"jti": "3d0c3cf797584bd193bd0fb1bd4e7<wbr>d30",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iat": 1458496025,</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://tr.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://tr.example.com</a>",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"aud": "</font><span style="font-family:monospace,monospace"><a href="https://rv.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://rv.example.com/</a>",</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"events": {</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>sessions-revoked":</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://example.com</a>",</font></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"sub": "47635747",</span><br></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>},</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>tokens-revoked":</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://example.com</a>",</font></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"sub": "47635747",</span><br></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>}</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>}</font></div><div><span style="font-family:monospace,monospace">}</span><br></div></div><div><br></div><div><br></div><div>1.1 Move only the subject "iss" to the event level and leave "sub" at the top level (next to the SET "iss"). I find this solution very confusing.</div><div><br></div><div><div><font face="monospace, monospace">{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"jti": "3d0c3cf797584bd193bd0fb1bd4e7<wbr>d30",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iat": 1458496025,</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://tr.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://tr.example.com</a>",</font></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"sub": "47635747",</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"aud": "</font><span style="font-family:monospace,monospace"><a href="https://rv.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://rv.example.com/</a>",</span></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"events": {</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>sessions-revoked":</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://example.com</a>",</font></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>},</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>tokens-revoked":</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://example.com</a>",</font></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>}</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>}</font></div><div><span style="font-family:monospace,monospace">}</span></div></div><div><br></div><div><br></div><div>2. Move iss+sub immediately under the "events" claim. No redundancy in this case.</div><div><br></div><div><div><font face="monospace, monospace">{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"jti": "3d0c3cf797584bd193bd0fb1bd4e7<wbr>d30",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iat": 1458496025,</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://tr.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://tr.example.com</a>",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"aud": "</font><span style="font-family:monospace,monospace"><a href="https://rv.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://rv.example.com/</a>",</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"events": {</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://example.com</a>",</font></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"sub": "47635747",</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>sessions-revoked": </font><font face="monospace, monospace">{</font><span style="font-family:monospace,monospace">},</span></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>tokens-revoked": </font><font face="monospace, monospace">{</font><span style="font-family:monospace,monospace">}</span></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>}</font></div><div><span style="font-family:monospace,monospace">}</span></div></div><div><br></div><div><br></div><div>3. Move iss+sub to a new nested claim.</div><div><br></div><div><div><font face="monospace, monospace">{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"jti": "3d0c3cf797584bd193bd0fb1bd4e7<wbr>d30",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iat": 1458496025,</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://tr.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://tr.example.com</a>",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"aud": "</font><span style="font-family:monospace,monospace"><a href="https://rv.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://rv.example.com/</a>",</span><br></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"target": {</span></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://example.com</a>",</font></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"sub": "47635747",</span><br></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>},</span></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"events": {</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>sessions-revoked": </font><font face="monospace, monospace">{</font><span style="font-family:monospace,monospace">},</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>tokens-revoked": </font><font face="monospace, monospace">{</font><span style="font-family:monospace,monospace">}</span></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>}</font></div><div><span style="font-family:monospace,monospace">}</span></div></div><div><br></div><div><br></div><div>4. Define a new top level issuer claim either for the SET or for the subject.</div><div><br></div><div><div><font face="monospace, monospace">{</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"jti": "3d0c3cf797584bd193bd0fb1bd4e7<wbr>d30",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iat": 1458496025,</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss": "<a href="https://tr.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://tr.example.com</a>",</font></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"iss-sub": "<a href="https://example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://example.com</a>",</font></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"sub": "47635747",</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"aud": "</font><span style="font-family:monospace,monospace"><a href="https://rv.example.com/" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://rv.example.com/</a>",</span><br></div><div><span style="font-family:monospace,monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"events": {</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>sessions-revoked": </font><font face="monospace, monospace">{</font><span style="font-family:monospace,monospace">},</span><br></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>"urn:ietf:params:risc:event:<wbr>tokens-revoked": </font><font face="monospace, monospace">{</font><span style="font-family:monospace,monospace">}</span></div><div><font face="monospace, monospace"> <span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span>}</font></div><div><span style="font-family:monospace,monospace">}</span></div></div><div><br></div><div><br></div><div>An open question is if this new iss+sub solution should be always required or if a top level iss+sub should also be allowed (when there is no conflict). I vote for having only one way for simplicity.</div><div><br></div><div>Once we decide on a solution we can start working on the RISC profile draft.</div><div><br></div><div>Thoughts?</div><div><br></div><div><div>Marius</div></div></div>______________________________<wbr>_________________<br>Openid-specs-risc mailing list<br><a href="mailto:Openid-specs-risc@lists.openid.net" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">Openid-specs-risc@lists.openid<wbr>.net</a><br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Drisc&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=oELWrk4I8hITS0xtNBEzkxMNmGjdHfFGkwNTJluxMQM&s=WH0oHORcbz6GzolvV9301ap4nCL-qYRmD7wWIWPJnL8&e=" rel="noreferrer" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">http://lists.openid.net/mailma<wbr>n/listinfo/openid-specs-risc</a><br></blockquote></div><div dir="ltr">--<span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span><br></div><div class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597m_1134046780769059888gmail_signature"><p dir="ltr">Nat Sakimura</p><p dir="ltr">Chairman of the Board, OpenID Foundation</p></div></div></blockquote><blockquote type="cite"><div><span>______________________________<wbr>_________________</span><br><span>Openid-specs-risc mailing list</span><br><span><a href="mailto:Openid-specs-risc@lists.openid.net" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">Openid-specs-risc@lists.openid<wbr>.net</a></span><br><span><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Drisc&d=DwICAg&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=oELWrk4I8hITS0xtNBEzkxMNmGjdHfFGkwNTJluxMQM&s=WH0oHORcbz6GzolvV9301ap4nCL-qYRmD7wWIWPJnL8&e=" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">https://urldefense.proofpoint.<wbr>com/v2/url?u=http-3A__lists.op<wbr>enid.net_mailman_listinfo_open<wbr>id-2Dspecs-2Drisc&d=DwICAg&c=R<wbr>oP1YumCXCgaWHvlZYR8PQcxBKCX5YT<wbr>pkKY057SbK10&r=JBm5biRrKugCH0F<wbr>kITSeGJxPEivzjWwlNKe4C_lLIGk&m<wbr>=oELWrk4I8hITS0xtNBEzkxMNmGjdH<wbr>fFGkwNTJluxMQM&s=WH0oHORcbz6Gz<wbr>olvV9301ap4nCL-qYRmD7wWIWPJnL8<wbr>&e=</a><span class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597Apple-converted-space"> </span></span><br></div></blockquote></div>______________________________<wbr>_________________<br>Openid-specs-risc mailing list<br><a href="mailto:Openid-specs-risc@lists.openid.net" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">Openid-specs-risc@lists.openid<wbr>.net</a><br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Drisc&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=0XvWuopUa1rUzdTHlWsUVZI7PePtDaGu3VrMUlwE2yU&s=EIvVFfL8djzqG2zMxSY4EPjMuBglQoE0xKzdgiOiOK8&e=" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">http://lists.openid.net/mailma<wbr>n/listinfo/openid-specs-risc</a><br></div></blockquote></div><br></div></div></div></div><br>______________________________<wbr>_________________<br>Openid-specs-risc mailing list<br><a href="mailto:Openid-specs-risc@lists.openid.net" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">Openid-specs-risc@lists.openid<wbr>.net</a><br><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Drisc&d=DwMFaQ&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=0XvWuopUa1rUzdTHlWsUVZI7PePtDaGu3VrMUlwE2yU&s=EIvVFfL8djzqG2zMxSY4EPjMuBglQoE0xKzdgiOiOK8&e=" rel="noreferrer" class="m_5638927420824936466m_-1824900303268500248gmail-m_-2518339591068322597cremed m_5638927420824936466m_-1824900303268500248gmail-cremed m_5638927420824936466m_-1824900303268500248cremed m_5638927420824936466cremed cremed" target="_blank">http://lists.openid.net/mailma<wbr>n/listinfo/openid-specs-risc</a></blockquote></div></div></div></div></blockquote></div><br></div></div></div></div></blockquote></div><br></div></div>
</div></blockquote></div><br></div></div></div></div></blockquote></div><br></div></div>
</div></blockquote></div><br></div></div></div></div></div></blockquote></div><br></div></div>