Wiki

Attendees

Nat Sakimura
Torsten Lodderstedt
Mark Haine
Bjorn Hjelm
Brian Campbell
Dima Postnikov
Takahiko Kawasaki
Kosuke Koiwai
Joseph Heenan
Kai Lehmann
Durand Stephane
Julian White
Alberto Pulido
Naohiro Fujie

Agenda

Brief review of external Orgs & Events
Agenda items
PRs & Issues

Brief review of external Orgs & Events

Agenda Items

Addition of new authors
- Torsten emailed to the mailing list
- There's no objection so far
- We will wait until 14th Nov

PRs & Issues

PR #43 – Signed Assertions - CONFLICT
- Kosuke closed the PR and recreated as PR #46
- For issue ~~#1212~~, Torsten already merged in the security consideration PR
- Kosuke will update the comment suitable for current situation
PR #44 – updated descriptions for 3 * name claims
- Joseph and Torsten approved
PR #42 – Age verification
- New problem around user consent dilemma.
- When OP requires user to consent providing "you are over 18"?
  - If user does not consent, RP will get nothing and not fulfilled the requirement as same as born_before=false
  - If user consent, RP will get born_before=true
- This dilemma is similar to issue ~~#1210~~
- For privacy consideration, it is one way to limit number of query on OP implementation. There're number of options…
- Kai proposed following change on age_is_at_least/born_before
  - Age to Value. e.g., value: 18
  - Value to Result: e.g., result: true/false
- There's a concern on request tampering.
  - Torsten will update security consideration and privacy consideration section
Issue ~~#1209~~ – Attaching evidence documents
- Kai and Jules had added an example of attaching objects
- OP returns JWT and binary data using multipart content
- Kai proposed that ID document itself should be on the evidence section, not on the verified_claims section
- From implementor's perspective, it will be easy to handle all data in the same JWT message even its size is over 10MBytes??
- It is better to ask implementers to build prototypes. Azusa is suitable person to be asked.
- Kai create PR around this.