<div dir="ltr">This makes a lot of sense to me. I support the change.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Nov 12, 2019 at 4:57 PM Richard Backman, Annabelle via Openid-specs-risc <<a href="mailto:openid-specs-risc@lists.openid.net">openid-specs-risc@lists.openid.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_2258683758275631128WordSection1">
<p class="MsoNormal"><span style="font-size:11pt">Hello RISC Working Group,<br>
<br>
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">The RISC Working Group was formed to take on the challenge of sharing signals and events related to user account security. Since then, additional signal sharing use cases have come into the picture, most notably
those that the <a href="https://cloud.google.com/blog/products/identity-security/re-thinking-federated-identity-with-the-continuous-access-evaluation-protocol" target="_blank">
Continuous Access Evaluation Protocol (CAEP)</a> aims to address. Given the significant overlap in requirements and the fundamental problem to be solved (i.e., A needs to inform B about something related to C), there is an opportunity for us to collaborate
across a broader spectrum of use cases than those that are the focus on the RISC Working Group today.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">To that end, after discussions between myself, Marius, members of the CAEP discussion group, and members of the OIDF board, we decided to re-charter the RISC Working Group as the “Shared Signals and Events”
Working Group, with a broader mandate to “enable the sharing of security events, state changes, and other signals” across a broad variety of subjects, and for a broad variety of authentication/authorization-related purposes. This change will allow us to bring
the CAEP work into the working group and advance it alongside the on-going RISC work. RISC will benefit by having more parties implementing shared components (such as the event stream management API, which currently lacks any production implementation), CAEP
will benefit by having a home for their work in the OIDF and by leveraging the work that has already been done within RISC, and both will benefit by the development of common protocols and infrastructure for the exchange of security events.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">We are circulating the draft revised charter and collecting feedback this week. Barring any significant concerns, we will submit it to the OIDF Specifications Council next week. Please take this opportunity
to review the draft revised charter (linked below) and share any questions or comments you have regarding it or the re-chartering process in general.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">A few notes about what the re-charter means, logistically:<u></u><u></u></span></p>
<ul style="margin-top:0in" type="disc">
<li class="gmail-m_2258683758275631128MsoListParagraph" style="margin-left:0in"><span style="font-size:11pt">Atul Tulshibagwale of Google will join Marius and me as a co-chair of the working group. Atul has been the driving force behind the CAEP work thus far,
and we welcome his help in steering this combined group.<u></u><u></u></span></li><li class="gmail-m_2258683758275631128MsoListParagraph" style="margin-left:0in"><span style="font-size:11pt">Development of CAEP will move from the existing caep-discuss mailing list to the RISC Working Group mailing list.<u></u><u></u></span></li><li class="gmail-m_2258683758275631128MsoListParagraph" style="margin-left:0in"><span style="font-size:11pt">CAEP documents will be added and tracked within the existing RISC BitBucket repository.<u></u><u></u></span></li><li class="gmail-m_2258683758275631128MsoListParagraph" style="margin-left:0in"><span style="font-size:11pt">Contributions to CAEP will be subject to the OIDF’s
<a href="https://openid.net/intellectual-property/" target="_blank">Contribution Agreement</a>. I believe most organizations involved in CAEP thus far already have executed agreements on file with OIDF, but not all. I believe all executed agreements are available
<a href="https://openid.net/executed-contribution-agreements/" target="_blank">on the OIDF site</a>, but don’t quote me on that.<u></u><u></u></span></li><li class="gmail-m_2258683758275631128MsoListParagraph" style="margin-left:0in"><span style="font-size:11pt">Mailing list and repository names will not change; we will continue to use <a href="mailto:openid-specs-risc@lists.openid.net" target="_blank">openid-specs-risc@lists.openid.net</a>. Life isn’t perfect.
</span><span style="font-size:11pt;font-family:"Apple Color Emoji"">😃</span><span style="font-size:11pt"><u></u><u></u></span></li></ul>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">The draft version of the revised charter can be found in the RISC BitBucket repository, here:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><a href="https://bitbucket.org/openid/risc/src/recharter/working-group-charter.md" target="_blank">https://bitbucket.org/openid/risc/src/recharter/working-group-charter.md</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">For those interested in understanding more about CAEP, I suggest looking through the caep-discuss mailing list archives, available here:<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><a href="https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!forum/caep-discuss" target="_blank">https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!forum/caep-discuss</a><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt">(Due to different moderation policies, this message is being sent out separately to the RISC and CAEP mailing lists. Apologies to those of you who are receiving this twice.
</span><span style="font-size:11pt;font-family:"Apple Color Emoji"">😃</span><span style="font-size:11pt">)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal">– <u></u><u></u></p>
<p class="MsoNormal">Annabelle Richard Backman<u></u><u></u></p>
<p class="MsoNormal">Co-chair, RISC Working Group, OpenID Foundation<u></u><u></u></p>
</div>
</div>
_______________________________________________<br>
Openid-specs-risc mailing list<br>
<a href="mailto:Openid-specs-risc@lists.openid.net" target="_blank">Openid-specs-risc@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-risc" rel="noreferrer" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-risc</a><br>
</blockquote></div>