FAPI_Meeting_Notes_2017 08 16

FAPI WG Meeting Notes (2017-08-16)

Date & Time: 2017-08-16 14:00 UTC

Location: GoToMeeting https://global.gotomeeting.com/join/321819862

Agenda

• 1.   Roll Call
• 2.   Adoption of the Agenda (Nat)
• 3.   External Orgs
  • 3.1.   UK Open Banking (Dave/Nat)
  • 3.2.   Berlin Group (Dave)
  • 3.3.   STET
• 4.   Future Specification Planning
  • 4.1.   Improvement of the text by a tech writer on Part 1 and 2 (Nat)
  • 4.2.   CIBA (Dave)
  • 4.3.   Part 3 - 5
• 5.   Issues
• 6.   Open Banking RW 1.0.1 (Joseph?)
• 7.   Events
  • 7.1.   APIDays Berlin: Banking APIs and PSD2 (Nat)
  • 7.2.   Fall F2F
• 8.   AOB
  • 8.1.   Next Call (Pacific)

The meeting was called to order at 14:05 UTC.

1.   Roll Call

• Attending: Nat, Carla, Dave, Joseph, Ralph

  • Guest:

• Regrets:

2.   Adoption of the Agenda (Nat)

3.   External Orgs

3.1.   UK Open Banking (Dave/Nat)

• Open Banking published security profile 1.1.

  • https://www.openbanking.org.uk/read-write-apis/security-profile/id1-0-1/

3.2.   Berlin Group (Dave)

• Introduced Torsten to Berling Group.

3.3.   STET

• https://www.stet.eu/en/news/news1/stet-psd2-api-is-now-available.html

4.   Future Specification Planning

4.1.   Improvement of the text by a tech writer on Part 1 and 2 (Nat)

4.2.   CIBA (Dave)

4.3.   Part 3 - 5

5.   Issues

• #???: Ensuring one-time use of request JWTs registered at the request JWT endpoint

  • http://lists.openid.net/pipermail/openid-specs-fapi/2017-August/000499.html

• #122: Add s_hash example
• #120: CIBA: x-fapi-device-id header
• #121: CIBA: Binding Messages
• #118: CIBA - Signature for error token notification
• #116: CIBA - authentication methods and proof of possession
• #115: CIBA - Support for multiple flows
• #117: CIBA - Signature for succesful token notification
• #110: Part 2 - more definition of s_hash
• #114: Part 1 - Require state
• #101: JWS signature algorithms for RW
• #104: User friendly names and registration of providers
• #100: Signing API response payloads
• #102: Query re x-fapi-... headers

6.   Open Banking RW 1.0.1 (Joseph?)

• https://www.openbanking.org.uk/read-write-apis/security-profile/id1-0-1/

7.   Events

7.1.   APIDays Berlin: Banking APIs and PSD2 (Nat)

• http://www.apidays.io/events/banking-2017
• Apply to be a speaker?

7.2.   Fall F2F

• Due to the availability of Tony, the week of the APIDays Berlin is likely.
• There was no issue raised by the callers.
• Nat will take it back to the Modrna WG.

8.   AOB

• Dave asked if there was any feedback from FS-ISAC. Nat replied that Anoop, unfortunately, could not join the last call and that he is looking forward to the report next week.

8.1.   Next Call (Pacific)

• Please do refer to the group calendar for the time.

The meeting was adjourned at 14:53 UTC.