1. OpenID Foundation Avatar OpenID Foundation
  2. WGs
  3. fapi

Wiki

Clone wiki

fapi / FAPI_Meeting_Notes_2023-01-11_Atlantic

View History

FAPI WG Agenda & Meeting Notes (2023-01-11)

The meeting was called to order at 14:03 UTC.

1.   Roll Call (Dave/Nat)

  • Attending:
  • Regrets:
  • Guest:

5.   Internal Liaisons

5.3.   iGov WG

  • Multiple acr values in requests as an array expressing a preference.
    • Conformance suite behavior seems to be different
    • Only EAP profile specifies ACR values
    • George states that if some prefer a combination of acr values, having an array for stating preference doesn’t work and would need to create a new acr value that is a combination of preferred values.
    • Theres not much implementation of ACR
    • Some would not like to NIST values due to list of requirements
  • The WG is to consider creating a profile so that it can be tested.

6.   External Orgs & Liaisons (Mike L./Chris)

6.1.   Brazil (Mike)

  • Continuing to receive high volume of recertification requests.
  • CIBA spec certification is coming up.
  • Open Finance (Insurance) conforming coming. Domingo etc. had an event this Monday.

6.2.   SAMA (Mike)

  • Finalized KSA FAPI Profile. We expect access to the mock bank to create a certification test.
  • New milestone - initial KSA FAPI profile January 16. Three banks agreed to test the test. Feb. 1 for the production target for 12 banks to certify then.

6.3.   Security Analysis

  • Next phase contract is done. Kicking off.

6.5.   IETF

  • DPoP is in IETF last call.
  • Step up authentication WG finished. AD/IESG stage.

7.   Drafts Updates (Nat)

7.1.   Security Profile

  • Need to merge some editorial fixes/typos

7.2.   Message Signing

  • Not much feedback from Last Call
  • A bunch of issues are being filed. We need to resolve them before moving forward.
  • WG members are asked to chime into the tickets early to create PRs.

7.4.   CIBA

  • Dave will investigate the possibility of making it compatible with FAPI 1 and 2
  • A joint call with Modrna WG is being planned. Tracked as issue #559 - Co-ordinate a joint call with Modrna WG on claims parameter for CIBA

9.   Issues (Nat)

Message signing issues: https://bitbucket.org/openid/fapi/issues?component=FAPI2%3A+Message+Signing&status=new&status=open

  • #565 - Add privacy consideration
    • Nat to own the ticket.
  • #561 - Intro need to be fixed
    • Dave to own the ticket.
  • #479 - Change to the naming of FAPI
    • To be closed
  • #487 - RS must check x-fapi-interaction-id is an UUID or IP address
    • Implementation notes to include clarified text.
  • #558 - update filenames for grant management and CIBA
    • Dima to clarify with Mike Jones.
  • #104 - User friendly names and registration of providers
    • Closing the ticket.
  • 567 - Clause 20" does not exist any longer...
    • Closing as resolved.

10.   AOB (Nat)

  • GNAP going through WGLC.

The call adjourned at 15:00

11.   Chat Transcripts

  1. Mike Leszcz - (OpenID Foundation) to Everyone 11:05 PM https://openid.net/2023/01/08/notice-of-vote-for-proposed-second-implementers-drafts-of-two-fapi-2-0-specifications/
  2. Me to Everyone 11:05 PM https://openid.net/2023/01/08/notice-of-vote-for-proposed-second-implementers-drafts-of-two-fapi-2-0-specifications/
  3. Mike Leszcz - (OpenID Foundation) to Everyone 11:06 PM https://openid.net/foundation/calendar-of-events/
  4. Mike Leszcz - (OpenID Foundation) to Everyone 11:16 PM https://docs.google.com/document/d/1mjmqPzfRI1l0ki9qnyaSz2YwAkH54gfG8A4lJtzA0WI/edit?usp=sharing
  5. Me to Everyone 11:17 PM https://files.consumerfinance.gov/f/documents/cfpb_data-rights-rulemaking-1033-SBREFA_outline_2022-10.pdf
  6. https://files.consumerfinance.gov/f/documents/cfpb_data-rights-rulemaking-1033-SBREFA-high-level-summary-discussion-guide_2022-10.pdf
  7. Joseph Heenan (OIDF/Authlete) to Everyone 11:18 PM This was the announcement from CPFB: https://www.consumerfinance.gov/about-us/newsroom/cfpb-kicks-off-personal-financial-data-rights-rulemaking/
  8. Kosuke Koiwai to Everyone 11:30 PM more than 50 registerd to attend on site, 330 people registered to watch online
  9. Dave Tonge (Moneyhub) to Everyone 11:35 PM https://bitbucket.org/openid/fapi/pull-requests/401
  10. Dave Tonge (Moneyhub) to Everyone 11:36 PM https://bitbucket.org/openid/fapi/pull-requests/400
  11. Dave Tonge (Moneyhub) to Everyone 11:36 PM https://bitbucket.org/openid/fapi/pull-requests/398
  12. Dave Tonge (Moneyhub) to Everyone 11:37 PM https://bitbucket.org/openid/fapi/pull-requests/397
  13. Dave Tonge (Moneyhub) to Everyone 11:38 PM https://bitbucket.org/openid/fapi/pull-requests/396
  14. Dave Tonge (Moneyhub) to Everyone 11:38 PM https://bitbucket.org/openid/fapi/pull-requests/395
  15. Dave Tonge (Moneyhub) to Everyone 11:39 PM https://bitbucket.org/openid/fapi/pull-requests/399
  16. Dave Tonge (Moneyhub) to Everyone 11:39 PM https://bitbucket.org/openid/fapi/pull-requests/393
  17. Dave Tonge (Moneyhub) to Everyone 11:39 PM https://bitbucket.org/openid/fapi/pull-requests/394
  18. Joseph Heenan (OIDF/Authlete) to Everyone 11:41 PM https://bitbucket.org/openid/fapi/issues?component=FAPI2%3A+Message+Signing&status=new&status=open
  19. Dave Tonge (Moneyhub) to Everyone 11:41 PM https://bitbucket.org/openid/fapi/issues/565/add-privacy-consideration
  20. Dave Tonge (Moneyhub) to Everyone 11:43 PM https://bitbucket.org/openid/fapi/issues/561/intro-need-to-be-fixed
  21. Chris Michael to Everyone 11:46 PM Hi all - sorry have to jump off now
  22. Dave Tonge (Moneyhub) to Everyone 11:46 PM https://bitbucket.org/openid/fapi/issues/479/change-to-the-naming-of-fapi
  23. Dave Tonge (Moneyhub) to Everyone 11:48 PM https://bitbucket.org/openid/fapi/issues/487/rs-must-check-x-fapi-interaction-id-is-an
  24. Dave Tonge (Moneyhub) to Everyone 11:53 PM https://bitbucket.org/openid/fapi/issues/558
  25. Dave Tonge (Moneyhub) to Everyone 11:55 PM https://bitbucket.org/openid/fapi/issues/104/user-friendly-names-and-registration-of
  26. Dave Tonge (Moneyhub) to Everyone 11:56 PM https://bitbucket.org/openid/fapi/issues/567/clause-20-does-not-exist-any-longer

Updated