<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Tony, any of the checklists could stipulate requirements for consent
policy<br>
<br>
As does the draft for the trusted email profile<br>
<br>
'<font size="2">show at most one page in 99% of the consent flows once
the user is authenticated</font>'<br>
<br>
paul<br>
<br>
On 03/06/2010 2:42 PM, Anthony Nadalin wrote:
<blockquote
cite="mid:A08279DC79B11C48AD587060CD93977125F7DDB6@TK5EX14MBXC101.redmond.corp.microsoft.com"
type="cite">
<meta http-equiv="Content-Type"
content="text/html; charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:624118462;
mso-list-template-ids:1004184814;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:2049835127;
mso-list-template-ids:39497276;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">So
it seems that Policy was dropped out of the original description of the
charter.
</span><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">The
problem is that not factoring in policy concerns more generally in
OpenID v.Next could hurt adoption. An example would be the lack of
prior informed consent for the linking that might occur as OpenID
v.Next goes up the assurance scale, but maybe no one is interested in
OpenID going beyond Level 1.</span><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif";">
<a class="moz-txt-link-abbreviated" href="mailto:openid-specs-bounces@lists.openid.net">openid-specs-bounces@lists.openid.net</a>
[<a class="moz-txt-link-freetext" href="mailto:openid-specs-bounces@lists.openid.net">mailto:openid-specs-bounces@lists.openid.net</a>]
<b>On Behalf Of </b>Eric Sachs<br>
<b>Sent:</b> Friday, May 14, 2010 9:48 AM<br>
<b>To:</b> openid-specs<br>
<b>Subject:</b> Draft charter for OpenID Certification working group<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Resending because a few people complained this
message ended up in their SPAMI Folder.<o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom: 12pt;"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom: 12pt;">----------
Forwarded message ----------<br>
From: <b>Eric Sachs</b> <<a moz-do-not-send="true"
href="mailto:esachs@google.com">esachs@google.com</a>><br>
Date: Mon, May 10, 2010 at 10:14 AM<br>
Subject: Draft OpenID Certification working group charter<br>
To: openid-specs <<a moz-do-not-send="true"
href="mailto:openid-specs@lists.openid.net">openid-specs@lists.openid.net</a>><br>
Cc: Allen Tom <<a moz-do-not-send="true"
href="mailto:atom@yahoo-inc.com">atom@yahoo-inc.com</a>><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">What
follows is a draft charter for the OpenID Certification working group.
Feedback is welcome, as are potential working group participants.
There is also a draft of some specific <a moz-do-not-send="true"
href="http://docs.google.com/View?id=ajkhp5hpp3tt_72gtng7zff"
target="_blank"><span style="color: rgb(0, 0, 204);">certification
check lists</span></a> that I hope will spawn feedback.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";"><br>
(a) Charter.<br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(i) WG
name: OpenID Certification<o:p></o:p></span></p>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(ii)
Purpose: Produce certification checklists for the use of OpenID in
different use-cases so that neutral certification bodies such as OIX
can validate IDPs against them as opposed to requiring each RP to
individual perform such an analysis of each potential IDP. Specific
goals are:<o:p></o:p></span></p>
</blockquote>
<p class="MsoNormal"
style="margin-left: 83.25pt; text-indent: -0.25in;">
<!--[if !supportLists]--><span
style="font-size: 10pt; font-family: "Courier New";"><span style="">o<span
style="font-family: "Times New Roman"; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none;">
</span></span></span><!--[endif]--><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Define the
checklist for at least one use-case<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left: 83.25pt; text-indent: -0.25in;">
<!--[if !supportLists]--><span
style="font-size: 10pt; font-family: "Courier New";"><span style="">o<span
style="font-family: "Times New Roman"; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none;">
</span></span></span><!--[endif]--><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Have at
least one IDP certified against that checklist by a certification body<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left: 83.25pt; text-indent: -0.25in;">
<!--[if !supportLists]--><span
style="font-size: 10pt; font-family: "Courier New";"><span style="">o<span
style="font-family: "Times New Roman"; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none;">
</span></span></span><!--[endif]--><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Have at
least one RP who will dynamically support the published list of IDP(s)
that have been certified<o:p></o:p></span></p>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(iii)
Scope: Produce a list of certification use-cases, and checklists for
them. We expect this work will identify the need for additional
enhancements to the technical standards, but in general this WG will
not directly develop those standards, but will coordinate with other
OpenID WGs to define the necessary standards.<o:p></o:p></span></p>
</blockquote>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(iv)
Proposed List of Use-Cases: The initial targeted use-cases are listed
below based on <a moz-do-not-send="true"
href="https://sites.google.com/site/oauthgoog/UXFedLogin/whitelisting"
target="_blank"><span style="color: rgb(0, 0, 204);">discussion</span></a> from
the April 2010 OpenID Summit and a <a moz-do-not-send="true"
href="http://docs.google.com/View?id=ajkhp5hpp3tt_72gtng7zff"
target="_blank"><span style="color: rgb(0, 0, 204);">later draft
proposal</span></a>.<o:p></o:p></span></p>
</blockquote>
<p class="MsoNormal"
style="margin-left: 83.25pt; text-indent: -0.25in;">
<!--[if !supportLists]--><span
style="font-size: 10pt; font-family: "Courier New";"><span style="">o<span
style="font-family: "Times New Roman"; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none;">
</span></span></span><!--[endif]--><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Trused
Email Profile<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left: 83.25pt; text-indent: -0.25in;">
<!--[if !supportLists]--><span
style="font-size: 10pt; font-family: "Courier New";"><span style="">o<span
style="font-family: "Times New Roman"; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none;">
</span></span></span><!--[endif]--><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Email
Validation Profile<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left: 83.25pt; text-indent: -0.25in;">
<!--[if !supportLists]--><span
style="font-size: 10pt; font-family: "Courier New";"><span style="">o<span
style="font-family: "Times New Roman"; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none;">
</span></span></span><!--[endif]--><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Untrusted
Email Profile<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left: 83.25pt; text-indent: -0.25in;">
<!--[if !supportLists]--><span
style="font-size: 10pt; font-family: "Courier New";"><span style="">o<span
style="font-family: "Times New Roman"; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none;">
</span></span></span><!--[endif]--><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">URL only
Profile<o:p></o:p></span></p>
<p class="MsoNormal"
style="margin-left: 83.25pt; text-indent: -0.25in;">
<!--[if !supportLists]--><span
style="font-size: 10pt; font-family: "Courier New";"><span style="">o<span
style="font-family: "Times New Roman"; font-style: normal; font-variant: normal; font-weight: normal; font-size: 7pt; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none;">
</span></span></span><!--[endif]--><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Email
Hosting Profile<o:p></o:p></span></p>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(v)
Anticipated audience or users of the work: Implementers of OpenID
Providers, Relying Parties, and certification bodies.<o:p></o:p></span></p>
</blockquote>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(vi)
Language in which the WG will conduct business: English.<br>
(vii) Method of work: E-mail discussions on the working group mailing
list, working group conference calls, and face-to-face meetings at the
Internet Identity Workshop and OpenID summits.<o:p></o:p></span></p>
</blockquote>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(viii)
Basis for determining when the work of the WG is completed: Work will
not be deemed to be complete until there is a consensus that the
resulting set of use-caess (and checklists) are sufficient to meet the
market needs for OpenID certification. Additional proposed use-cases
behond the initial list are expected.<o:p></o:p></span></p>
</blockquote>
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(b)
Background Information.<br>
<br>
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(i)
Related work being done in other WGs or organizations: ICAM, InCommon,
Open Identity Exchange (OIX), Kantara<o:p></o:p></span></p>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(ii)
Proposers:<o:p></o:p></span></p>
</blockquote>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Eric
Sachs, <a moz-do-not-send="true" href="mailto:esachs@google.com"
target="_blank"><span style="color: rgb(0, 0, 204);">esachs@google.com</span></a>,
Google (chair)<br>
Allen Tom, <a moz-do-not-send="true" href="mailto:atom@yahoo-inc.com"
target="_blank">atom@yahoo-inc.com</a><o:p></o:p></span></p>
</blockquote>
</blockquote>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">Additional
proposers to be added here<o:p></o:p></span></p>
</blockquote>
</blockquote>
<blockquote style="margin-left: 30pt; margin-right: 0in;">
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";">(iii)
Anticipated Contributions: None.<o:p></o:p></span></p>
</blockquote>
<div>
<p class="MsoNormal"><span
style="font-size: 10pt; font-family: "Arial","sans-serif";"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
specs mailing list
<a class="moz-txt-link-abbreviated" href="mailto:specs@lists.openid.net">specs@lists.openid.net</a>
<a class="moz-txt-link-freetext" href="http://lists.openid.net/mailman/listinfo/openid-specs">http://lists.openid.net/mailman/listinfo/openid-specs</a>
</pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
No virus found in this incoming message.
Checked by AVG - <a class="moz-txt-link-abbreviated" href="http://www.avg.com">www.avg.com</a>
Version: 9.0.819 / Virus Database: 271.1.1/2915 - Release Date: 06/03/10 02:25:00
</pre>
</blockquote>
</body>
</html>