1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (1–25 of 706)

Title T P Status Votes Assignee Milestone Created Updated Actions
#718: "signature";req and "signature-input";req are not recommended
HTTP Signing
proposal major new
#717: Missing security considerations for attacker model
FAPI2: Attacker Model
bug major new
#716: RFC6125 is obsolete
FAPI2: Security Profile
bug major new
#715: JARM IANA registrations are missing
JARM
bug major new
#714: Multiple HTTP message signatures in a single HTTP message
HTTP Signing
proposal major new
#713: FAPI Overview Page text change
Others
task major resolved
#712: FAPI1 Errata
FAPI 1: Baseline
bug major new
#711: ID token signature validation
FAPI2: Message Signing
proposal major new
#710: FAPI2 Acknowledgements
FAPI2: Security Profile
bug major resolved
#709: Separate out HTTP signatures from the message signing spec
FAPI2: Message Signing
bug major new
#708: Passing access tokens in url query not disallowed in FAPI2SP?
FAPI2: Security Profile
bug major resolved
#707: Very restrictive list of TLS ciphers suites
FAPI2: Security Profile
bug minor duplicate
#706: Unclear section 5.4 of FAPI2 security profile
FAPI2: Security Profile
enhancement minor closed
#705: Conformance testing for typ in request object for FAPI1
Certification
bug major open
#704: Consider recommendations from Cyber Safety Review Board report
FAPI2: Security Profile
bug major resolved
#703: Tweaks to BCP195 language
FAPI2: Security Profile
bug major resolved
#702: Normative text within security considerations
FAPI2: Security Profile
bug major resolved
#701: Clarification over how fast we expect implementors to update after an update is issued to BCP195
FAPI2: Security Profile
bug major resolved
#700: Remove the list of four ciphers for TLS 1.2 and move to BCP195
FAPI 1: Baseline
bug major resolved
#699: FAPI 2 vs. Security BCP Gap Analysis
FAPI2: Security Profile
bug major resolved
#698: Vulnerability in TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
FAPI2: Security Profile
bug major resolved
#697: FAPI2SP have links to https://openid.bitbucket.io/
FAPI2: Security Profile
bug major resolved
#696: FAPI2SP should reference formal analysis
FAPI2: Security Profile
bug major resolved
#695: iat, nbf clause readability
FAPI2: Security Profile
bug major resolved
#694: Refresh token clause readability
FAPI2: Security Profile
bug major resolved 1
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. …
  9. 28
  10. 29