CIBA - Support for multiple flows

[Dave Tonge]

Current draft limits clients using CIBA to only use CIBA and not Hybrid.

This should be relaxed and a note should be added that CIBA can only be supported in either notification or polling mode.

This was discussed in the FAPI meeting in London last week.

[Bjorn Hjelm]

Is this comment against FAPI CIBA or MODRNA CIBA?

[Dave Tonge]

FAPI CIBA.

The MODRNA spec doesn't mention other flows, but already has the restriction about either notification or polling, however, I feel that as it is a security consideration, it should possibly be repeated in the FAPI spec.

[Dave Tonge]

I've removed text to do with this from the FAPI CIBA profile.

[Nat Sakimura]

So, what is the next step for this ticket?

[Dave Tonge]

This can be closed

[Joseph Heenan]

closing as per Dave's previous comment.