Wiki

Clone wiki

fapi / FAPI_Meeting_Notes_2020-06-24_Atlantic

FAPI WG Meeting Notes (2020-06-24)

Date & Time: 2020-06-24 14:00 UTC

Location: GoToMeeting https://global.gotomeeting.com/join/321819862

The meeting was called to order at 14:__ UTC.

1.   Roll Call

  • Attending: Nat, Don, Bjorn, Mark, Kosuke, Francis, Adam, Joseph, Dave, Dima, Chris, Ralph, Barry, Glyn
  • Regrets:

3.   Events

3.2.   OIDF+FDX Workshop (Don)

  • Still waiting for date.

3.3.   IMF Institute of International Finance (Don)

  • APAC time zone meeting is also being considered.

3.5.   EC DGConnect (Mark)

  • 29th 14:30 CET. Nat has a conflict. He will respond to the thread.

3.6.   OSW2020 (Daniel)

  • FDX is interested in presenting.

3.7.   SIOP Info Exchange (Nat)

SIOP Info Exchange meeting is to happen on the 25th of June at 2 PM UTC. Registration page TBD.

4.   External Organizations

4.1.   Australia (Stuart/Dima)

Going live next week. Limited rollout.

4.2.   UK (Chris)

  • OBIE Steering Committee today. Hopefully, confirm the crisis implementation period ending in June.
  • CMA 9 to go through the Certification: FAPI, Functional, CX.

5.   OAuth JAR (Nat)

7.   Multiple issuers (Joseph)

Chased OBIE for their implementation status. Waiting for their answer. Francis commented on FAPI ML. Relevant ticket: https://bitbucket.org/openid/fapi/issues/255/certification-clarification-request

8.   FAPI 2.0 (Daniel)

PR https://bitbucket.org/openid/fapi/pull-requests/163/add-clarification-on-mix-up-mitigation/diff is adding issuer to the authorization response to mitigate Mix-up attack.

Brian pointed out that adding those parameters that are not in the core specification to a profile like this is problematic. Daniel and Brian agreed to start a mail thread in OAuth WG.

9.   AOB

The meeting was adjourned at 14:59 UTC.

Updated