FAPI WG Agenda & Meeting Notes (2022-10-20)

Date & Time: 2020-10-21 01:00 UTC 17:00 PST (5pm)

Agenda

The meeting was called to order at 01:00 UTC.

1. Roll Call (Anoop)

Nat, Ed, David (AICC), Dima, Anoop

Agenda/notes:

Conference Update FIDO-Authenticate conference (Seattle)
- Question on Embedded approach in conference. Create a ticket and follow up.
- Granular consent at the account. (May be at the initial interaction). Only verifiable token can do consent.
Atlantic Call update
- Closing all open PRs/issue base line (2nd implementation draft) and attacker model.
- Only issue (text) is left close.
- Reviewed Grant management. 2nd implementation draft
- HTTP signature - 1st implementation draft.
- Need implementation to test it. Certification team is working on it.
- Formal analysis is expected to complete end of this week.
- https://bitbucket.org/openid/fapi/issues/543/browser-swap-attack-explained-on-2022-09
Roadmap Alignment
- 45 days public review of ID 2. + 7 days + comments resolution = aprox 60 days
- Followed by Final public review + 60 days (tentative spring timeline - late march)
- Grant management - TBD (Formal analysis dependency)
Regional Updates
- FDX USA summit in dallas and waiting for updates
- Saudi region has adopted FAPI 1.0 and will have path for FAPI 2

Next call will be an Pacific Call. Next Pacific call will be in two weeks (11-03-2022 @ 5pm PST) UTC - 11-04-2022 1:00 AM.