1.   Roll Call

• Present: Nat, Joseph, John
• Regret:

2.   Adoption of the agenda

• Since draft agenda was not sent out, the following topics were dealt with.

3.   OAuth JAR new DISCUSS (John)

After almost two years, new DISCUSS came in for OAuth JAR. The biggest one is the name collision possibility. We may have to register the OAuth AuthZ request parameters into JWT or write text about the requirements for coordination between OAuth registry and JWT registry.

John and Nat is going to start processing them on the repo.

4.   FAPI Deployment Advice Document (Joseph)

Joseph wrote a first draft of the document. https://bitbucket.org/josephheenan/fapi/src/edce6adee86b16f5fed2ef71ce8a86f4f01dc181/Financial_API_Deployment.md

Comments are welcome.

5.   OIDC for Device Flow (Joseph)

Joseph solicited some idea on OIDC for Device Flow that Authlete is considering creating. John pointed out that without concrete understanding of the use-case, it is difficult to determine the threats. Joseph do more research on the topic and report back.

6.   Events

• W3C TPAC is in Fukuoka between Sept. 16 - 20. This might be a good opportunity to talk to apple people regarding SIWA.
• FIDO meeting is the subsequent week in Korea.

7.   AOB

There was a huge security incident for Seven Pay/Seven Eleven in Japan this week. Nat explained about what is open in the press for now.

The call closed at 16:00 UTC