<div dir="ltr">Hi Shayne,<div><br><div>Thanks for sharing this. After reviewing the report, I thought it would be good to compare their review of ID2 with their review of ID3: Which issues have been addressed, which are remaining, and if any new ones are observed. Would you be able to present this kind of summary in the next meeting?</div><div><br></div><div>Atul</div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 3, 2024 at 9:45 AM Windley, Phil via Openid-specs-risc <<a href="mailto:openid-specs-risc@lists.openid.net">openid-specs-risc@lists.openid.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
Thanks Shayne. Once approved, where is this made available? Public doc, I presume. <br id="m_-2702728858154591753lineBreakAtBeginningOfMessage">
<div><br>
<blockquote type="cite">
<div>On Aug 29, 2024, at 2:59 PM, Shayne Miel (smiel) via Openid-specs-risc <<a href="mailto:openid-specs-risc@lists.openid.net" target="_blank">openid-specs-risc@lists.openid.net</a>> wrote:</div>
<br>
<div>
<div style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none">
<table border="1" cellspacing="0" cellpadding="0" style="border-collapse:collapse;border:medium">
<tbody>
<tr style="height:15.25pt">
<td width="711" valign="top" style="width:842.35pt;border:1.5pt solid rgb(237,125,49);padding:0in 5.4pt;height:15.25pt">
<div style="margin-top:0px;margin-bottom:0px"><strong><span style="background:rgb(255,255,153)">CAUTION</span></strong><span style="background:rgb(255,255,153)">: This email originated from outside of the organization. Do not click links or open
attachments unless you can confirm the sender and know the content is safe.</span><u></u><u></u></div>
</td>
</tr>
</tbody>
</table>
</div>
<br style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none">
<div style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none">
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
Hello working group members. You may recall that earlier this year we engaged a research team from the Institute of Information Security at the University of Stuttgart, Germany to analyze the security properties of the Shared Signals Framework. We are happy
to announce that this work has been completed. The final report can be downloaded from this link:<span> </span><a href="https://github.com/user-attachments/files/16762914/2024-08-26_WP4.1b-Report.pdf" id="m_-2702728858154591753LPlnk906396" target="_blank">https://github.com/user-attachments/files/16762914/2024-08-26_WP4.1b-Report.pdf</a></div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
As a last step, the working group is being asked to formally approve the report. We will take an official poll during the working group meeting on September 10th. For anyone who is not able to attend, if you wish to voice an opinion, feel free to share it via
this email list.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
The best way to understand this report is to start with section 4. In that section, the researchers list the security properties that they are proving given the assumptions made in section 2. The appendix contains the formal mathematics of the proofs, and section
3 contains a short list of recommendations unrelated to the proofs.</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
<br>
</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
Please let me know if you have any questions,</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
Shayne</div>
<div style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt">
<br>
</div>
<div id="m_-2702728858154591753Signature">
<table style="text-align:left;max-width:100%;color:rgb(51,51,51);box-sizing:border-box;border-collapse:collapse;border-spacing:0px">
<tbody>
<tr>
<td style="text-align:left;width:50px;box-sizing:border-box"><span style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:12px;color:rgb(51,51,51)"><span id="m_-2702728858154591753cid:c15c1694-b4cc-4db7-83ad-587e4aa1974e"><Outlook-3hnuuyry.png></span><br>
</span></td>
<td style="text-align:left;width:10px;box-sizing:border-box"><span style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:12px;color:rgb(51,51,51)"><img width="10" height="50" src="https://duo.com/assets/img/email/spacer.gif" style="width: 10px; height: 50px; max-width: initial; box-sizing: border-box; display: block; vertical-align: middle;"></span></td>
<td style="text-align:left;box-sizing:border-box">
<div style="text-align:left;font-family:Helvetica,sans-serif;font-size:12px">
<span style="color:rgb(51,51,51)"><b>Shayne Miel</b> <span> </span></span><span style="color:rgb(153,153,153)">/</span><span style="color:rgb(51,51,51)"> Principal Engineer (he, him, his)<br>
</span><span style="color:rgb(23,78,134)"><a href="mailto:smiel@cisco.com" style="color:rgb(23,78,134)" target="_blank">smiel@cisco.com</a></span><span style="color:rgb(51,51,51)"><br>
(919) 923-6230<span> </span><br>
</span><span style="color:rgb(23,78,134)"><a href="https://www.cisco.com/site/us/en/products/security/index.html" title="https://www.cisco.com/site/us/en/products/security/index.html" style="color:rgb(23,78,134)" target="_blank">cisco.com</a></span><span style="color:rgb(51,51,51)"><br>
</span></div>
</td>
<td style="text-align:left;box-sizing:border-box"><span style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:12px;color:rgb(51,51,51)"><img width="1" height="50" src="https://duo.com/assets/img/email/spacer.gif" style="width: 1px; height: 50px; box-sizing: border-box; display: block; vertical-align: middle;"></span></td>
</tr>
<tr>
<td colspan="4" style="text-align:left;box-sizing:border-box">
<div style="text-align:left;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:12px;color:rgb(51,51,51)">
<br>
</div>
</td>
</tr>
</tbody>
</table>
<span style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt"><br>
</span></div>
</div>
<span style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;float:none;display:inline">_______________________________________________</span><br style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none">
<span style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;float:none;display:inline">Openid-specs-risc
mailing list</span><br style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none">
<a href="mailto:Openid-specs-risc@lists.openid.net" style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">Openid-specs-risc@lists.openid.net</a><br style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none">
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-risc" style="font-family:Verdana;font-size:13px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-risc</a></div>
</blockquote>
</div>
<br>
</div>
_______________________________________________<br>
Openid-specs-risc mailing list<br>
<a href="mailto:Openid-specs-risc@lists.openid.net" target="_blank">Openid-specs-risc@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-specs-risc" rel="noreferrer" target="_blank">https://lists.openid.net/mailman/listinfo/openid-specs-risc</a><br>
</blockquote></div>