<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi Shayne,</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<ol>
<li>Not necessarily. End users are not usually aware of in-session events (defined by CAEP) whereas RISC is used in a more end-user centric manner as "account protection".<span></span></li><li>Because it is not for the operation / lifecycle of the protocol itself. It is a signal that the user made a change their account, in this case disabling account protection features.</li></ol>
<div>HTH</div>
<div>tim</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Openid-specs-risc <openid-specs-risc-bounces@lists.openid.net> on behalf of Shayne Miel (smiel) via Openid-specs-risc <openid-specs-risc@lists.openid.net><br>
<b>Sent:</b> Monday, October 11, 2021 10:21<br>
<b>To:</b> Openid-specs-risc@lists.openid.net <Openid-specs-risc@lists.openid.net><br>
<b>Subject:</b> [Openid-specs-risc] Opt Out / Opt In</font>
<div> </div>
</div>
<style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Sorry for all the questions recently. I have a few more, this time about the <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fopenid.net%2Fspecs%2Fopenid-risc-profile-specification-1_0.html%23opt-out&data=04%7C01%7Ctim.cappalli%40microsoft.com%7Cac6190fef0e648d8722f08d98cc284c2%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637695590818372595%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=LK%2F6M6HQDnEqy9rNOTfQMSxATL7zpwLr6n3MrV%2BeR7g%3D&reserved=0" originalsrc="https://openid.net/specs/openid-risc-profile-specification-1_0.html#opt-out" shash="JHsZ51BeekjfZOXqDje+/Z/xf8etgLmg2Nr8g+/a7WgfUoJAntJxdxweBv3xxe0QlpAWOyx6+75du2SyPLeFSEbfrKwq1g3wioF+hgfqib92Vd49hYLGwNFIkiTfYAA+3iZ2eANtPQjet8FoUljqGSMeXjwxqpPNslKq/AoSskw=" title="https://openid.net/specs/openid-risc-profile-specification-1_0.html#opt-out">
RISC Opt Out / Opt In events</a>.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<ol>
<li>If a user opts out of RISC events, should they also be opted out of CAEP events?<span></span></li><li>Why is Opt Out/In status controlled with events instead of with the stream management API?</li></ol>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Thanks!</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Shayne</div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div id="x_Signature">
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<table style="box-sizing:border-box; border-collapse:collapse; border-spacing:0px; max-width:100%; color:rgb(51,51,51); font-family:"Helvetica Neue",Helvetica,Arial,sans-serif; font-size:12px; text-align:start">
<tbody style="box-sizing:border-box">
<tr style="box-sizing:border-box">
<td width="50" style="box-sizing:border-box"><img width="50" height="50" style="box-sizing:border-box; vertical-align:middle; display:block" src="https://duo.com/assets/img/email/duo-logo-email-signature.gif"></td>
<td width="10" style="box-sizing:border-box"><img width="10" height="50" style="box-sizing:border-box; vertical-align:middle; display:block" src="https://duo.com/assets/img/email/spacer.gif"></td>
<td style="box-sizing:border-box">
<div style="box-sizing:border-box; margin:0px; font-family:Helvetica,sans-serif; display:inline">
<strong style="box-sizing:border-box; font-weight:bold; display:inline">Shayne Miel</strong><span> </span>
<div style="box-sizing:border-box; margin:0px; display:inline"><span style="box-sizing:border-box; color:rgb(153,153,153)">/</span><span> </span><span style="box-sizing:border-box">Engineering Technical Leader (he, him, his)</span></div>
<div style="box-sizing:border-box; margin:0px; display:inline"><br style="box-sizing:border-box">
<a href="mailto:smiel@cisco.com" style="box-sizing:border-box; color:rgb(99,178,70)">smiel@cisco.com</a></div>
<div style="box-sizing:border-box; margin:0px; display:inline"><br style="box-sizing:border-box">
<span style="box-sizing:border-box">(919) 923-6230</span><span style="box-sizing:border-box"></span></div>
<div style="box-sizing:border-box; margin:0px; display:inline"><br style="box-sizing:border-box; display:inline">
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fduo.com%2F&data=04%7C01%7Ctim.cappalli%40microsoft.com%7Cac6190fef0e648d8722f08d98cc284c2%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637695590818412569%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=ZxXmQdNHRevUVpBfO2o5A%2FSiey1FpXYhgt8w0BwwRcM%3D&reserved=0" originalsrc="https://duo.com/" shash="ECQ2AsnMYcGiJH/SXRlw5Uzr37UyyRUmHl2M0YL/ObhyBhyh7u6suJGAEbg4O/eGfXzm7z9I63DQD9WLdZlxJQqd/8Sqzwiau/qvByTigNdy1CCjtUjvtR+7BAnrykvOGzwrgYqZcpN6oHvU8yPE6gZGGBufEEgZ8sWNb+dl2Ms=" style="box-sizing:border-box; color:rgb(99,178,70)">Duo.com</a></div>
</div>
</td>
<td style="box-sizing:border-box"><img width="1" height="50" style="box-sizing:border-box; vertical-align:middle; display:block" src="https://duo.com/assets/img/email/spacer.gif"></td>
</tr>
<tr style="box-sizing:border-box">
<td colspan="4" style="box-sizing:border-box">
<div style="box-sizing:border-box; margin:0px; display:inline"><br style="box-sizing:border-box">
<span style="box-sizing:border-box; display:inline">----------<br style="box-sizing:border-box">
Duo Security is<span> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fduo.com%2Fabout%2Fpress%2Freleases%2Fcisco-completes-acquisition-of-duo-security&data=04%7C01%7Ctim.cappalli%40microsoft.com%7Cac6190fef0e648d8722f08d98cc284c2%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637695590818452547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=rZFhsl1Kuxgm53gp9uDo5ZGVw9vNKiZayhVukaMz2JY%3D&reserved=0" originalsrc="https://duo.com/about/press/releases/cisco-completes-acquisition-of-duo-security" shash="BZp4jpG/zhBGvcxkKheqpe32jwsAVpIGp843g+/VhNrncVuwqd3cCDbEJzSUPhiGnj0Ti0e2kHuWgtoPAMTE1Yb42heReC/BJSbhkNMU5CWOPVjDHXhA6xXs5mSLvC7TUSPdvYqFFvLkRyUdLlL8eDys4oKNdQzQEhaNcnTG+Vs=" style="box-sizing:border-box; color:rgb(99,178,70)">now
part of Cisco</a>.</span></div>
</td>
</tr>
</tbody>
</table>
<br>
</div>
</div>
</div>
</div>
</div>
</body>
</html>