
<html>

<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">

<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>

</head>

<body dir="ltr">

<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof ContentPasted0">

As promised in today's call, here is a brief proposal for requiring the "sub_id" claim as a top-level member of the SET and making "subject" a deprecated claim in the RISC and CAEP event schemas: <a href="https://github.com/openid/sharedsignals/issues/52#issuecomment-1610119621" id="LPlnkOWALinkPreview">https://github.com/openid/sharedsignals/issues/52#issuecomment-1610119621</a></div>

<div class="_Entity _EType_OWALinkPreview _EId_OWALinkPreview _EReadonly_1">

<div id="LPBorder_GTaHR0cHM6Ly9naXRodWIuY29tL29wZW5pZC9zaGFyZWRzaWduYWxzL2lzc3Vlcy81MiNpc3N1ZWNvbW1lbnQtMTYxMDExOTYyMQ.." class="LPBorder185986" style="width: 100%; margin-top: 16px; margin-bottom: 16px; position: relative; max-width: 800px; min-width: 424px;">

<table id="LPContainer185986" role="presentation" style="padding: 12px 36px 12px 12px; width: 100%; border-width: 1px; border-style: solid; border-color: rgb(200, 200, 200); border-radius: 2px;">

<tbody>

<tr valign="top" style="border-spacing: 0px;">

<td>

<div id="LPImageContainer185986" style="position: relative; margin-right: 12px; height: 120px; overflow: hidden; width: 240px;">

<a target="_blank" id="LPImageAnchor185986" href="https://github.com/openid/sharedsignals/issues/52#issuecomment-1610119621"><img id="LPThumbnailImageId185986" alt="" height="120" style="display: block;" width="240" src="https://opengraph.githubassets.com/8849bf97cb74b3c11a4887955302938ca2e71541c425c95115e9873a8f48facf/openid/sharedsignals/issues/52"></a></div>

</td>

<td style="width: 100%;">

<div id="LPTitle185986" style="font-size: 21px; font-weight: 300; margin-right: 8px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px;">

<a target="_blank" id="LPUrlAnchor185986" href="https://github.com/openid/sharedsignals/issues/52#issuecomment-1610119621" style="text-decoration: none;">Should subject identifier be pulled out of the event definitions? · Issue #52 · openid/sharedsignals</a></div>

<div id="LPDescription185986" style="font-size: 14px; max-height: 100px; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; margin-bottom: 12px; margin-right: 8px; overflow: hidden; color: rgb(102, 102, 102);">

>From Phil Hunt: IETF spec expects subject identifier to be in the top level of the JWT. SSF expects subject identifier to be embedded within the events being transmitted. Can we move subject identi...</div>

<div id="LPMetadata185986" style="font-size: 14px; font-weight: 400; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; color: rgb(166, 166, 166);">

github.com</div>

</td>

</tr>

</tbody>

</table>

</div>

</div>

<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

<br>

</div>

<div class="elementToProof">

<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

<br>

</div>

<div id="Signature">

<div>

<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

</div>

<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

<table style="box-sizing: border-box; border-collapse: collapse; border-spacing: 0px; max-width: 100%; font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 12px; text-align: start; color: rgb(51, 51, 51);">

<tbody style="box-sizing:border-box">

<tr style="box-sizing:border-box">

<td width="50" style="box-sizing:border-box"><img style="max-width:100%" data-outlook-trace="F:1|T:1" src="cid:f190691e-ec2e-484b-b535-3a1560d15388"><br>

</td>

<td width="10" style="box-sizing:border-box"><img width="10" height="50" style="box-sizing: border-box; vertical-align: middle; display: block; width: 10px; height: 50px; max-width: initial;" src="https://duo.com/assets/img/email/spacer.gif"></td>

<td style="box-sizing:border-box">

<div style="box-sizing:border-box; margin:0px; font-family:Helvetica,sans-serif; display:inline">

<strong style="box-sizing:border-box; font-weight:bold; display:inline">Shayne Miel</strong><span> </span>

<div style="box-sizing:border-box; margin:0px; display:inline"><span style="box-sizing: border-box; color: rgb(153, 153, 153);">/</span><span> </span><span style="box-sizing:border-box">Principal Engineer (he, him, his)</span></div>

<div style="box-sizing:border-box; margin:0px; display:inline"><br style="box-sizing:border-box">

<a href="mailto:smiel@cisco.com" style="box-sizing: border-box; color: rgb(99, 178, 70);"><span style="color: rgb(23, 78, 134);">smiel@cisco.com</span></a></div>

<div style="box-sizing:border-box; margin:0px; display:inline"><br style="box-sizing:border-box">

<span style="box-sizing:border-box">(919) 923-6230</span><span style="box-sizing:border-box"></span></div>

<div style="box-sizing:border-box; margin:0px; display:inline"><br style="box-sizing:border-box; display:inline">

<a href="https://www.cisco.com/site/us/en/products/security/index.html" title="https://www.cisco.com/site/us/en/products/security/index.html"><span style="color: rgb(23, 78, 134);">cisco.com</span></a><br>

</div>

</div>

</td>

<td style="box-sizing:border-box"><img width="1" height="50" style="box-sizing:border-box; vertical-align:middle; display:block" src="https://duo.com/assets/img/email/spacer.gif"></td>

</tr>

<tr style="box-sizing:border-box">

<td colspan="4" style="box-sizing:border-box"><br>

</td>

</tr>

</tbody>

</table>

<br>

</div>

</div>

</div>

</div>

</body>

</html>