1.   Roll Call (Anoop)

Nat, Ed, Mark, Dima and anoop

• Regrets:

Agenda/notes:

• Security Analysis update - Follow up
• • Issues review https://bitbucket.org/openid/fapi/issues/523/rotation-of-refresh-token-compromised
• • • Issues 523
• • • Issues 525
• • • Issue 526

525 : Security consideration to update to solve for 525.

https://bitbucket.org/openid/fapi/issues?status=new&status=open&component=FAPI2%3A%20Baseline Doesn’t need to pass on tokens to layers ID token can have audience

• Regional Updates
• • AU CDR

Funding stage2 for FAPI 2 and stage3 also getting bundled. Security analysis info sec proposal & recommendation in AUCDR coming soon. Evaluating write access API & Reference architecture – Review with FAPI and get feedback. Will create FAPI ticket. Looking at Solid web standard – verifiable credential and delegated access. Need to see any inter-operability. It solves some interesting problems they are solving. https://solidproject.org Extension to Stu uni university of new south wales building on top web attacker – define and quantify security Risk/threats/scenarios models. Community driven. https://bitbucket.org/openid/fapi/issues/523/rotation-of-refresh-token-compromised We will keep it open and estimate time to get this final comments from AU team in 3-4 weeks. Mark V will update some comments POV from AU team – for recording perspective then we can close it. Dima – Should we consider differentiate between trusted and

2.   Next Call

Next call will be an Pacific Call. Next Pacific call will be in two weeks (08-25-2022 @ 5pm PST) UTC - 08-26-2022 1:00 AM.