<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<blockquote type="cite" class="">
<div class="">
<div class="" style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt;">
<ol class="">
<li class="">It is a signal that the user made a change their account</li></ol>
</div>
</div>
</blockquote>
<div class="">It's worth underscoring this point. The opt-in/out events are signals about actions/state changes that occurred on the transmitter's side. They, like all events, are informative; they are not commands. The event definition does not oblige the
recipient to take any particular action based on receiving an opt-in or opt-out event (or any event) beyond validating the event and acknowledging it or reporting an error as appropriate. A transmitter MUST NOT depend on the recipient doing anything other
than that (such as reciprocating the opt-in/out for a bi-directional stream) unless they have some additional agreement or understanding with the recipient, e.g., there is a contractual agreement between transmitter and receiver that obliges a particular behavior,
or both are implementing some higher level protocol that constrains their behavior.</div>
<div class=""><br class="">
</div>
<div class="">It's also worth noting that if the <i class="">recipient </i>offers an opt-in/out on their side, they would implement that by subscribing/unsubscribing to events for the subject via the Event Stream Management API.</div>
<div class=""><br class="">
</div>
<div class="">
<div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div>—</div>
<div>Annabelle Backman (she/her)</div>
<div><a href="mailto:richanna@amazon.com" class="">richanna@amazon.com</a></div>
<div class=""><br class="">
</div>
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">On Oct 12, 2021, at 7:21 AM, Tim Cappalli via Openid-specs-risc <<a href="mailto:openid-specs-risc@lists.openid.net" class="">openid-specs-risc@lists.openid.net</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="WordSection1" style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<table class="MsoTableGrid" border="1" cellspacing="0" cellpadding="0" style="border-collapse: collapse; border: none;">
<tbody class="">
<tr style="height: 15.25pt;" class="">
<td width="711" valign="top" style="width: 842.35pt; border: 1.5pt solid rgb(237, 125, 49); padding: 0in 5.4pt; height: 15.25pt;" class="">
<div style="margin-top: 0px; margin-bottom: 0px;" class=""><strong class=""><span style="background-color: rgb(255, 255, 153); background-position: initial initial; background-repeat: initial initial;" class="">CAUTION</span></strong><span style="background-color: rgb(255, 255, 153); background-position: initial initial; background-repeat: initial initial;" class="">:
This email originated from outside of the organization. Do not click links or open attachments unless you can confirm the sender and know the content is safe.</span><o:p class=""></o:p></div>
</td>
</tr>
</tbody>
</table>
</div>
<br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
Hi Shayne,</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
<br class="">
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
<ol class="">
<li class="">Not necessarily. End users are not usually aware of in-session events (defined by CAEP) whereas RISC is used in a more end-user centric manner as "account protection".<span class=""></span></li><li class="">Because it is not for the operation / lifecycle of the protocol itself. It is a signal that the user made a change their account, in this case disabling account protection features.</li></ol>
<div class="">HTH</div>
<div class="">tim</div>
</div>
<div id="appendonsend" class=""></div>
<hr tabindex="-1" style="display: inline-block; width: 780.078125px;" class="">
<div id="divRplyFwdMsg" dir="ltr" class=""><font face="Calibri, sans-serif" style="font-size: 11pt;" class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Openid-specs-risc <<a href="mailto:openid-specs-risc-bounces@lists.openid.net" class="">openid-specs-risc-bounces@lists.openid.net</a>>
on behalf of Shayne Miel (smiel) via Openid-specs-risc <<a href="mailto:openid-specs-risc@lists.openid.net" class="">openid-specs-risc@lists.openid.net</a>><br class="">
<b class="">Sent:</b><span class="Apple-converted-space"> </span>Monday, October 11, 2021 10:21<br class="">
<b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:Openid-specs-risc@lists.openid.net" class="">Openid-specs-risc@lists.openid.net</a><span class="Apple-converted-space"> </span><<a href="mailto:Openid-specs-risc@lists.openid.net" class="">Openid-specs-risc@lists.openid.net</a>><br class="">
<b class="">Subject:</b><span class="Apple-converted-space"> </span>[Openid-specs-risc] Opt Out / Opt In</font>
<div class=""> </div>
</div>
<div dir="ltr" class="">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
Sorry for all the questions recently. I have a few more, this time about the<span class="Apple-converted-space"> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fopenid.net%2Fspecs%2Fopenid-risc-profile-specification-1_0.html%23opt-out&data=04%7C01%7Ctim.cappalli%40microsoft.com%7Cac6190fef0e648d8722f08d98cc284c2%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637695590818372595%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=LK%2F6M6HQDnEqy9rNOTfQMSxATL7zpwLr6n3MrV%2BeR7g%3D&reserved=0" originalsrc="https://openid.net/specs/openid-risc-profile-specification-1_0.html#opt-out" shash="JHsZ51BeekjfZOXqDje+/Z/xf8etgLmg2Nr8g+/a7WgfUoJAntJxdxweBv3xxe0QlpAWOyx6+75du2SyPLeFSEbfrKwq1g3wioF+hgfqib92Vd49hYLGwNFIkiTfYAA+3iZ2eANtPQjet8FoUljqGSMeXjwxqpPNslKq/AoSskw=" title="https://openid.net/specs/openid-risc-profile-specification-1_0.html#opt-out" class="">RISC
Opt Out / Opt In events</a>.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
<br class="">
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
<ol class="">
<li class="">If a user opts out of RISC events, should they also be opted out of CAEP events?<span class=""></span></li><li class="">Why is Opt Out/In status controlled with events instead of with the stream management API?</li></ol>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
Thanks!</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
Shayne</div>
<div class="">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
<br class="">
</div>
<div id="x_Signature" class="">
<div class="">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;" class="">
<table style="box-sizing: border-box; border-collapse: collapse; border-spacing: 0px; max-width: 100%; color: rgb(51, 51, 51); font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 12px; text-align: start;" class="">
<tbody style="box-sizing: border-box;" class="">
<tr style="box-sizing: border-box;" class="">
<td width="50" style="box-sizing: border-box;" class=""><img width="50" height="50" src="https://duo.com/assets/img/email/duo-logo-email-signature.gif" style="box-sizing: border-box; vertical-align: middle; display: block;" class=""></td>
<td width="10" style="box-sizing: border-box;" class=""><img width="10" height="50" src="https://duo.com/assets/img/email/spacer.gif" style="box-sizing: border-box; vertical-align: middle; display: block;" class=""></td>
<td style="box-sizing: border-box;" class="">
<div style="box-sizing: border-box; margin: 0px; font-family: Helvetica, sans-serif; display: inline;" class="">
<strong style="box-sizing: border-box; font-weight: bold; display: inline;" class="">Shayne Miel</strong><span class=""> </span><span class="Apple-converted-space"> </span>
<div style="box-sizing: border-box; margin: 0px; display: inline;" class=""><span style="box-sizing: border-box; color: rgb(153, 153, 153);" class="">/</span><span class=""> </span><span style="box-sizing: border-box;" class="">Engineering Technical Leader
(he, him, his)</span></div>
<span class="Apple-converted-space"> </span>
<div style="box-sizing: border-box; margin: 0px; display: inline;" class=""><br style="box-sizing: border-box;" class="">
<a href="mailto:smiel@cisco.com" style="box-sizing: border-box; color: rgb(99, 178, 70);" class="">smiel@cisco.com</a></div>
<span class="Apple-converted-space"> </span>
<div style="box-sizing: border-box; margin: 0px; display: inline;" class=""><br style="box-sizing: border-box;" class="">
<span style="box-sizing: border-box;" class="">(919) 923-6230</span><span style="box-sizing: border-box;" class=""></span></div>
<span class="Apple-converted-space"> </span>
<div style="box-sizing: border-box; margin: 0px; display: inline;" class=""><br style="box-sizing: border-box; display: inline;" class="">
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fduo.com%2F&data=04%7C01%7Ctim.cappalli%40microsoft.com%7Cac6190fef0e648d8722f08d98cc284c2%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637695590818412569%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=ZxXmQdNHRevUVpBfO2o5A%2FSiey1FpXYhgt8w0BwwRcM%3D&reserved=0" originalsrc="https://duo.com/" shash="ECQ2AsnMYcGiJH/SXRlw5Uzr37UyyRUmHl2M0YL/ObhyBhyh7u6suJGAEbg4O/eGfXzm7z9I63DQD9WLdZlxJQqd/8Sqzwiau/qvByTigNdy1CCjtUjvtR+7BAnrykvOGzwrgYqZcpN6oHvU8yPE6gZGGBufEEgZ8sWNb+dl2Ms=" style="box-sizing: border-box; color: rgb(99, 178, 70);" class="">Duo.com</a></div>
</div>
</td>
<td style="box-sizing: border-box;" class=""><img width="1" height="50" src="https://duo.com/assets/img/email/spacer.gif" style="box-sizing: border-box; vertical-align: middle; display: block;" class=""></td>
</tr>
<tr style="box-sizing: border-box;" class="">
<td colspan="4" style="box-sizing: border-box;" class="">
<div style="box-sizing: border-box; margin: 0px; display: inline;" class=""><br style="box-sizing: border-box;" class="">
<span style="box-sizing: border-box; display: inline;" class="">----------<br style="box-sizing: border-box;" class="">
Duo Security is<span class=""> </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fduo.com%2Fabout%2Fpress%2Freleases%2Fcisco-completes-acquisition-of-duo-security&data=04%7C01%7Ctim.cappalli%40microsoft.com%7Cac6190fef0e648d8722f08d98cc284c2%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637695590818452547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=rZFhsl1Kuxgm53gp9uDo5ZGVw9vNKiZayhVukaMz2JY%3D&reserved=0" originalsrc="https://duo.com/about/press/releases/cisco-completes-acquisition-of-duo-security" shash="BZp4jpG/zhBGvcxkKheqpe32jwsAVpIGp843g+/VhNrncVuwqd3cCDbEJzSUPhiGnj0Ti0e2kHuWgtoPAMTE1Yb42heReC/BJSbhkNMU5CWOPVjDHXhA6xXs5mSLvC7TUSPdvYqFFvLkRyUdLlL8eDys4oKNdQzQEhaNcnTG+Vs=" style="box-sizing: border-box; color: rgb(99, 178, 70);" class="">now
part of Cisco</a>.</span></div>
</td>
</tr>
</tbody>
</table>
<br class="">
</div>
</div>
</div>
</div>
</div>
</div>
<span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class="">Openid-specs-risc
mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><a href="mailto:Openid-specs-risc@lists.openid.net" class="">Openid-specs-risc@lists.openid.net</a></span><br style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">
<span style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;" class=""><a href="http://lists.openid.net/mailman/listinfo/openid-specs-risc" class="">http://lists.openid.net/mailman/listinfo/openid-specs-risc</a></span></div>
</blockquote>
</div>
<br class="">
</body>
</html>