<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Tim,<div class=""><br class=""></div><div class="">I’m not sure what you mean by “I don't believe the secevent RFCs say how they should be referenced”. They would never do that.</div><div class=""><br class=""></div><div class="">Inside the stream configuration which is entirely within the SSEF, I think you can reference any way you want. </div><div class=""><br class=""></div><div class="">The confusion I had was that <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fschemas.openid.net%2Fsecevent%2Frisc%2Fdelivery-method%2Fpush&data=05%7C01%7Ctim.cappalli%40microsoft.com%7Cd06ecf65fc4e4cfd040a08da81470ecf%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637964441246055504%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=8dBaPzuXSlhURhwyC40MW%2F%2B5Le2iVNAbQ2UcryzkrW8%3D&reserved=0" class="" style="font-family: "Courier New"; font-size: 10pt; color: rgb(32, 32, 255);">https://schemas.openid.net/secevent/risc/delivery-method/push</a> suggested an entirely different method than RFC8935. If that’s not the intention, then just use RFC8935 or "<a href="https://www.rfc-editor.org/rfc/rfc8935.txt" class="">https://www.rfc-editor.org/rfc/rfc8935.txt</a>”. The rfc-editor link would be considered the authoritative link for an RFC.</div><div class=""><br class=""></div><div class="">The openid specific URI had given me the impression openid was doing yet another delivery method than the IETF specs (which of course I could not find).</div><div class=""><br class=""></div><div class=""><span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class="">Phillip Hunt</span></div><div class=""><div class=""><div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div>@independentid</div><div><a href="mailto:phil.hunt@independentid.com" class="">phil.hunt@independentid.com</a></div><div class=""><br class=""></div></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On Aug 18, 2022, at 11:56 AM, Tim Cappalli <<a href="mailto:Tim.Cappalli@microsoft.com" class="">Tim.Cappalli@microsoft.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta charset="UTF-8" class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt; font-family: Arial, sans-serif;" class="">Hey Phil – thanks for bringing this up. I don't believe the secevent RFCs say how they should be referenced.<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt; font-family: Arial, sans-serif;" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt; font-family: Arial, sans-serif;" class="">Are you suggesting we should reference the RFC numbers instead of URIs?<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt; font-family: Arial, sans-serif;" class=""><o:p class=""> </o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt; font-family: Arial, sans-serif;" class="">Tim<o:p class=""></o:p></span></div><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt; font-family: Arial, sans-serif;" class=""><o:p class=""> </o:p></span></div><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(181, 196, 223); padding: 3pt 0in 0in;" class=""><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 10pt; font-family: Calibri, sans-serif;"><b class=""><span style="font-size: 12pt;" class="">From:<span class="Apple-converted-space"> </span></span></b><span style="font-size: 12pt;" class="">Openid-specs-risc <<a href="mailto:openid-specs-risc-bounces@lists.openid.net" class="">openid-specs-risc-bounces@lists.openid.net</a>> on behalf of Phillip Hunt via Openid-specs-risc <<a href="mailto:openid-specs-risc@lists.openid.net" class="">openid-specs-risc@lists.openid.net</a>><br class=""><b class="">Date:<span class="Apple-converted-space"> </span></b>Thursday, August 18, 2022 at 14:28<br class=""><b class="">To:<span class="Apple-converted-space"> </span></b>OpenID RISC List <<a href="mailto:openid-specs-risc@lists.openid.net" class="">openid-specs-risc@lists.openid.net</a>><br class=""><b class="">Subject:<span class="Apple-converted-space"> </span></b>[Openid-specs-risc] Question on delivery methods<o:p class=""></o:p></span></p></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class="">Looking at the shared signals framework spec (<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fopenid.net%2Fspecs%2Fopenid-sse-framework-1_0-ID1.html&data=05%7C01%7Ctim.cappalli%40microsoft.com%7Cd06ecf65fc4e4cfd040a08da81470ecf%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637964441246055504%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=vU9qrwiM04aC1lRqA43HAupl9ghRGA2ss5q%2B1oU%2Bvfs%3D&reserved=0" style="color: blue; text-decoration: underline;" class="">https://openid.net/specs/openid-sse-framework-1_0-ID1.html</a>), <o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class="">I noticed the delivery methods are not RFC8935/8936 (as per the SECEVENTS specs) but instead are: <o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in 24pt 0.0001pt 0.5in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><samp style="font-family: "Courier New";" class=""><span style="" class=""><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fschemas.openid.net%2Fsecevent%2Frisc%2Fdelivery-method%2Fpush&data=05%7C01%7Ctim.cappalli%40microsoft.com%7Cd06ecf65fc4e4cfd040a08da81470ecf%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637964441246055504%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=8dBaPzuXSlhURhwyC40MW%2F%2B5Le2iVNAbQ2UcryzkrW8%3D&reserved=0" style="color: blue; text-decoration: underline;" class="">https://schemas.openid.net/secevent/risc/delivery-method/push</a></span></samp><span style="font-family: Verdana, sans-serif;" class=""><o:p class=""></o:p></span></div><div class=""><div style="margin: 0in 24pt 0.0001pt 0.5in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><samp style="font-family: "Courier New";" class=""><span style="" class=""><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fschemas.openid.net%2Fsecevent%2Frisc%2Fdelivery-method%2Fpoll&data=05%7C01%7Ctim.cappalli%40microsoft.com%7Cd06ecf65fc4e4cfd040a08da81470ecf%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637964441246055504%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C&sdata=fh%2Be0K4rK0ezQOxH%2FxV8FcWWAYr%2BHqkgEl6GmZf%2FTEA%3D&reserved=0" style="color: blue; text-decoration: underline;" class="">https://schemas.openid.net/secevent/risc/delivery-method/poll</a></span></samp><span style="font-family: Verdana, sans-serif;" class=""><o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class="">Is there a difference between these methods and RFC8935, RFC8936? If they are different, is there a specification for these methods? Near as I can tell, the CISCO shared signals implementation is the same.<o:p class=""></o:p></span></div></div></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class="">Thanks,<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class=""><o:p class=""> </o:p></span></div></div><div class=""><div class=""><div class=""><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class="">Phillip Hunt<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class="">@independentid<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0in; font-size: 10pt; font-family: Calibri, sans-serif;" class=""><span style="font-size: 11pt;" class=""><a href="mailto:phil.hunt@independentid.com" style="color: blue; text-decoration: underline;" class="">phil.hunt@independentid.com</a></span></div></div></div></div></div></div></div></blockquote></div><br class=""></div></body></html>