<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
Thanks Shayne. Once approved, where is this made available? Public doc, I presume. <br id="lineBreakAtBeginningOfMessage">
<div><br>
<blockquote type="cite">
<div>On Aug 29, 2024, at 2:59 PM, Shayne Miel (smiel) via Openid-specs-risc <openid-specs-risc@lists.openid.net> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<div class="WordSection1" style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<table class="MsoTableGrid" border="1" cellspacing="0" cellpadding="0" style="border-collapse: collapse; border: medium;">
<tbody>
<tr style="height: 15.25pt;">
<td width="711" valign="top" style="width: 842.35pt; border: 1.5pt solid rgb(237, 125, 49); padding: 0in 5.4pt; height: 15.25pt;">
<div style="margin-top: 0px; margin-bottom: 0px;"><strong><span style="background: rgb(255, 255, 153);">CAUTION</span></strong><span style="background: rgb(255, 255, 153);">: This email originated from outside of the organization. Do not click links or open
attachments unless you can confirm the sender and know the content is safe.</span><o:p></o:p></div>
</td>
</tr>
</tbody>
</table>
</div>
<br style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<div style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
Hello working group members. You may recall that earlier this year we engaged a research team from the Institute of Information Security at the University of Stuttgart, Germany to analyze the security properties of the Shared Signals Framework. We are happy
to announce that this work has been completed. The final report can be downloaded from this link:<span class="Apple-converted-space"> </span><a href="https://github.com/user-attachments/files/16762914/2024-08-26_WP4.1b-Report.pdf" id="LPlnk906396">https://github.com/user-attachments/files/16762914/2024-08-26_WP4.1b-Report.pdf</a></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
As a last step, the working group is being asked to formally approve the report. We will take an official poll during the working group meeting on September 10th. For anyone who is not able to attend, if you wish to voice an opinion, feel free to share it via
this email list.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
The best way to understand this report is to start with section 4. In that section, the researchers list the security properties that they are proving given the assumptions made in section 2. The appendix contains the formal mathematics of the proofs, and section
3 contains a short list of recommendations unrelated to the proofs.</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
Please let me know if you have any questions,</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
Shayne</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt;">
<br>
</div>
<div id="Signature">
<table style="text-align: left; max-width: 100%; color: rgb(51, 51, 51); box-sizing: border-box; border-collapse: collapse; border-spacing: 0px;">
<tbody>
<tr>
<td style="text-align: left; width: 50px; box-sizing: border-box;"><span style="font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 12px; color: rgb(51, 51, 51);"><span id="cid:c15c1694-b4cc-4db7-83ad-587e4aa1974e"><Outlook-3hnuuyry.png></span><br>
</span></td>
<td style="text-align: left; width: 10px; box-sizing: border-box;"><span style="font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 12px; color: rgb(51, 51, 51);"><img width="10" height="50" src="https://duo.com/assets/img/email/spacer.gif" style="width: 10px; height: 50px; max-width: initial; box-sizing: border-box; display: block; vertical-align: middle;"></span></td>
<td style="text-align: left; box-sizing: border-box;">
<div style="text-align: left; font-family: Helvetica, sans-serif; font-size: 12px;">
<span style="color: rgb(51, 51, 51);"><b>Shayne Miel</b> <span class="Apple-converted-space"> </span></span><span style="color: rgb(153, 153, 153);">/</span><span style="color: rgb(51, 51, 51);"> Principal Engineer (he, him, his)<br>
</span><span style="color: rgb(23, 78, 134);"><a href="mailto:smiel@cisco.com" style="color: rgb(23, 78, 134);">smiel@cisco.com</a></span><span style="color: rgb(51, 51, 51);"><br>
(919) 923-6230<span class="Apple-converted-space"> </span><br>
</span><span style="color: rgb(23, 78, 134);"><a href="https://www.cisco.com/site/us/en/products/security/index.html" title="https://www.cisco.com/site/us/en/products/security/index.html" style="color: rgb(23, 78, 134);">cisco.com</a></span><span style="color: rgb(51, 51, 51);"><br>
</span></div>
</td>
<td style="text-align: left; box-sizing: border-box;"><span style="font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 12px; color: rgb(51, 51, 51);"><img width="1" height="50" src="https://duo.com/assets/img/email/spacer.gif" style="width: 1px; height: 50px; box-sizing: border-box; display: block; vertical-align: middle;"></span></td>
</tr>
<tr>
<td colspan="4" style="text-align: left; box-sizing: border-box;">
<div style="text-align: left; font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 12px; color: rgb(51, 51, 51);">
<br>
</div>
</td>
</tr>
</tbody>
</table>
<span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt;"><br>
</span></div>
</div>
<span style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">_______________________________________________</span><br style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<span style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; float: none; display: inline !important;">Openid-specs-risc
mailing list</span><br style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<a href="mailto:Openid-specs-risc@lists.openid.net" style="font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Openid-specs-risc@lists.openid.net</a><br style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-risc" style="font-family: Verdana; font-size: 13px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">https://lists.openid.net/mailman/listinfo/openid-specs-risc</a></div>
</blockquote>
</div>
<br>
</body>
</html>