<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
It was brought to my attention that the attached document may not have come through for some people because of how the mailing list gets sent out. You can now download it here to review:
<a href="https://github.com/openid/sharedsignals/files/15014966/2024-04-09_WP4.1a-Report.pdf" id="LPlnk402479">
https://github.com/openid/sharedsignals/files/15014966/2024-04-09_WP4.1a-Report.pdf</a></div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Openid-specs-risc <openid-specs-risc-bounces@lists.openid.net> on behalf of Shayne Miel (smiel) via Openid-specs-risc <openid-specs-risc@lists.openid.net><br>
<b>Sent:</b> Tuesday, April 9, 2024 12:47 PM<br>
<b>To:</b> Openid-specs-risc@lists.openid.net <openid-specs-risc@lists.openid.net><br>
<b>Subject:</b> [Openid-specs-risc] Formal security analysis</font>
<div> </div>
</div>
<style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
As you may recall, we have been working with an outside group to conduct a formal security analysis of the Shared Signals Framework. Their first deliverable is ready, which details the assumptions and modeling decisions that they will be working with. Before
moving on to the next deliverable, the report itself, we would like to gather any concerns or feedback from the working group. We will be discussing this during the next working group call (4/16), but I wanted to share it here so that people have a chance
to look over it before we meet.</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Feel free to respond here if you have any questions or concerns,</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Shayne</div>
<div class="x_elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<table style="text-align:left; max-width:100%; color:rgb(51,51,51); box-sizing:border-box; border-collapse:collapse; border-spacing:0px">
<tbody>
<tr>
<td style="text-align:left; width:50px; box-sizing:border-box"><span style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif; font-size:12px; color:rgb(51,51,51)"><img style="max-width:100%" data-outlook-trace="F:2|T:2" src="cid:8e0d432b-f42b-42ef-9e4c-94e6e6a83f95"><br>
</span></td>
<td style="text-align:left; width:10px; box-sizing:border-box"><span style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif; font-size:12px; color:rgb(51,51,51)"><img width="10" height="50" style="width:10px; height:50px; max-width:initial; box-sizing:border-box; display:block; vertical-align:middle" src="https://duo.com/assets/img/email/spacer.gif"></span></td>
<td style="text-align:left; box-sizing:border-box">
<div style="text-align:left; font-family:Helvetica,sans-serif; font-size:12px"><span style="color:rgb(51,51,51)"><b>Shayne Miel</b>
</span><span style="color:rgb(153,153,153)">/</span><span style="color:rgb(51,51,51)"> Principal Engineer (he, him, his)
<br>
</span><span style="color:rgb(23,78,134)"><a href="mailto:smiel@cisco.com" id="OWAe8642298-4bcd-cb76-3f4e-6706e2663a5a" class="x_OWAAutoLink" data-loopstyle="linkonly" style="color:rgb(23,78,134)">smiel@cisco.com</a></span><span style="color:rgb(51,51,51)">
<br>
(919) 923-6230 <br>
</span><span style="color:rgb(23,78,134)"><a href="https://www.cisco.com/site/us/en/products/security/index.html" id="OWA5056abc5-4271-8a33-60b5-ad5775428cf4" class="x_OWAAutoLink" title="https://www.cisco.com/site/us/en/products/security/index.html" data-loopstyle="linkonly" style="color:rgb(23,78,134)">cisco.com</a></span></div>
</td>
<td style="text-align:left; box-sizing:border-box"><span style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif; font-size:12px; color:rgb(51,51,51)"><img width="1" height="50" style="width:1px; height:50px; box-sizing:border-box; display:block; vertical-align:middle" src="https://duo.com/assets/img/email/spacer.gif"></span></td>
</tr>
<tr>
<td colspan="4" style="text-align:left; box-sizing:border-box">
<div style="text-align:left; font-family:"Helvetica Neue",Helvetica,Arial,sans-serif; font-size:12px; color:rgb(51,51,51)">
<br>
</div>
</td>
</tr>
</tbody>
</table>
<span style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)"><br>
</span></div>
</body>
</html>