1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Issues

Filter by:

Advanced search

Issues (76–100 of 478)

Title T P Status Votes Assignee Milestone Created Updated Actions
#278: duplicate kids in authorization server's jwks
FAPI 1: Advanced
bug major duplicate
#605: JARM for signed authZ responses seems to allow MACs
FAPI2: Message Signing
bug major invalid
#524: Create a security consideration/note on A. Cuckoo’s Token Attack (FAPI 1.0)
FAPI 1: Advanced
bug major invalid
#300: 5.2.3. Public client should be renamed to 5.2.3. Mobile client
FAPI 1: Advanced
bug major invalid
#301: 5.2.3. - 6 Is `amr` always required?
FAPI 1: Advanced
bug major invalid
#88: Sender constraining the code
FAPI 1: Advanced
bug major invalid
#89: s_hash needs to be defined more precisely
FAPI 1: Advanced
bug major invalid
#391: text about encryption algorithms in part2 may need clarification
FAPI 1: Advanced
bug major on hold
#395: Unclear formatting in FAPI1-Baseline final client section
FAPI 1: Baseline
bug major resolved
#622: Review FAPI1 security considerations for clarity
FAPI 1: Advanced
bug major resolved
#677: (Review Title) in the section headings
FAPI2: Attacker Model
bug major resolved
#681: See Clause 9 for normative references in Clause 2 wrong
FAPI2: Attacker Model
bug major resolved
#691: General (Review title)
FAPI2: Attacker Model
bug minor resolved
#656: Create terms and definition as well as the abbreviations for the attacker model document
FAPI2: Attacker Model
bug major resolved
#674: length of nonce tested in OP conformance tests
FAPI2: Security Profile
bug major resolved 1
#670: Use of FAPI with mandatory MTLS
FAPI2: Security Profile
bug major resolved
#651: Avoid "should be" and "shall be" where possible
FAPI2: Security Profile
bug major resolved
#679: (ed) replace (this) specification with (this) document
FAPI2: Security Profile
bug major resolved
#642: Continuation of #619 -- Add some text to make the readers aware of the caveats.
FAPI2: Security Profile
bug major resolved
#550: Should Network Layer Protections be made server-side enforced?
FAPI2: Security Profile
bug major resolved
#683: minimum length for EC keys?
FAPI2: Security Profile
bug minor resolved
#638: Add some more text to Introduction
FAPI2: Security Profile
bug major resolved
#678: (ed) Privacy considerations is a top level clause while Security considerations is a second level subclause
FAPI2: Security Profile
bug major resolved
#652: CIBA is not in bibliography nor abbreviations
FAPI2: Security Profile
bug minor resolved
#646: NOTE in 5.2.1 has "can"
FAPI2: Security Profile
bug major resolved
  2. 1
  3. 2
  4. 3
  5. 4
  6. 5
  7. 6
  8. …
  9. 19
  10. 20