OpenID v.Next Core Protocol Charter

Torsten Lodderstedt torsten at lodderstedt.net
Sat May 22 09:30:28 UTC 2010


does this or another group consider to incorporate some kind of single 
logout support into OpenId?

regards,
Torsten.

> At IIW yesterday I held a session on bashing the OpenID v.Nest Core 
> Protocol Charter. Below is the current draft. Comments and/or 
> questions welcome. Anyone interested in being a fellow proposer please 
> let me know and I will add you.
>
> -- Dick
>
> *(a)** /_Charter_/.*
>
> *(i)* *WG name:*  OpenID v.Next Core Protocol.
>
> *(ii)* *Purpose:*  Produce a core protocol specification or family of 
> specifications for OpenID v.Next that address the limitations and 
> drawbacks present in the OpenID 2.0 that limit OpenID’s applicability, 
> adoption, usability, privacy, and security. Specific goals are:
>
> · define message flows and verification methods,
>
> · enable support for controlled release of attributes,
>
> · enable aggregation of attributes from multiple verifiable sources,
>
> · enable support for a spectrum of clients, including passive clients 
> per current usage, thin active clients, and active clients with OP 
> functionality,
>
> · enable authentication to and use of attributes by non-browser 
> applications,
>
> · enable the use of public key technology to enhance scalability and 
> performance,
>
> · enable optimized protocol flows combining authentication, attribute 
> release, and resource authorization,
>
> · define profiles and support features intended to enable OpenID to be 
> used at levels of assurance higher than NIST SP800-63 v2 level 1 ,
>
> · define an extension mechanism
>
> · ensure the use of OpenID on mobile devices,
>
> · ensure the use of OpenID on existing browsers with URL length 
> restrictions,
>
> · complement OAuth 2.0
>
> · minimize migration effort from OpenID 2.0
>
> · seamlessly integrate with and complement the other OpenID v.Next 
> specifications.
>
> Compatibility with OpenID 2.0 is an explicit non-goal for this work.
>
> *(iii)* *Scope:*  Produce a next generation OpenID core protocol 
> specification or specifications, consistent with the purpose statement.
>
> *(iv)* *Proposed List of Specifications*:  OpenID v.Next Core Protocol 
> and possibly related specifications.
>
> *(v)* *Anticipated audience or users of the work:*  Implementers of 
> OpenID Providers, Relying Parties, Active Clients, and non-browser 
> applications utilizing OpenID.
>
> *(vi)* *Language in which the WG will conduct business*:  English.
>
> *(vii)* *Method of work: *E-mail discussions on the working group 
> mailing list, working group conference calls, and face-to-face 
> meetings at the Internet Identity Workshop and OpenID summits.
>
> *(viii)* *Basis for determining when the work of the WG is 
> completed:*  Work will not be deemed to be complete until there is a 
> consensus that the resulting protocol specification or family of 
> specifications fulfills the working group goals. Additional proposed 
> changes beyond that initial consensus will be evaluated on the basis 
> of whether they increase or decrease consensus within the working 
> group.  The work will be completed once it is apparent that maximal 
> consensus on the draft has been achieved, consistent with the purpose 
> and scope.
>
> *(b)** /_Background Information_/.*
>
> *(i)* *Related work being done in other WGs or organizations*:  OpenID 
> Authentication 2.0 and related specifications, including Attribute 
> Exchange (AX), Contract Exchange (CX), Provider Authentication Policy 
> Extension (PAPE), and the draft User Interface (UI) Extension. OAuth, 
> OAuth WRAP, and OAuth 2.0. OpenID Connect proposal. SAML 2.0 Core and 
> SAML Authn Context.
>
> *(ii)* *Proposers:*
>
> Dick Hardt, dick.hardt at gmail.com <mailto:dick.hardt at gmail.com> (chair)
>
> Michael B. Jones, mbj at microsoft.com <mailto:mbj at microsoft.com>
>
> Breno de Medeiros, breno at google.com <mailto:breno at google.com>
>
> Ashish Jain, Ashish.Jain at paypal.com <mailto:Ashish.Jain at paypal.com>
>
> George Fletcher, gffletch at aol.com <mailto:gffletch at aol.com>
>
> * (iii)* *Anticipated Contributions*:  None.
>
>
> _______________________________________________
> specs mailing list
> specs at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs
>    

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20100522/92bc3b77/attachment.html>


More information about the specs mailing list