FAPI_Meeting_Notes_2020 06 24_Atlantic

FAPI WG Meeting Notes (2020-06-24)

Date & Time: 2020-06-24 14:00 UTC

Location: GoToMeeting https://global.gotomeeting.com/join/321819862

Agenda

• 1.   Roll Call
• 2.   Adoption of Agenda (Nat)
• 3.   Events
  • 3.1.   Identiverse
  • 3.2.   OIDF+FDX Workshop (Don)
  • 3.3.   IMF Institute of International Finance (Don)
  • 3.4.   EU FinTech lab on digital identities (Mark)
  • 3.5.   EC DGConnect (Mark)
  • 3.6.   OSW2020 (Daniel)
  • 3.7.   SIOP Info Exchange (Nat)
• 4.   External Organizations
  • 4.1.   Australia (Stuart/Dima)
  • 4.2.   UK (Chris)
• 5.   OAuth JAR (Nat)
• 6.   PRs for 1.0 (Dave)
• 7.   Multiple issuers (Joseph)
• 8.   FAPI 2.0 (Daniel)
• 9.   AOB

The meeting was called to order at 14:__ UTC.

1.   Roll Call

• Attending: Nat, Don, Bjorn, Mark, Kosuke, Francis, Adam, Joseph, Dave, Dima, Chris, Ralph, Barry, Glyn
• Regrets:

2.   Adoption of Agenda (Nat)

3.   Events

3.1.   Identiverse

3.2.   OIDF+FDX Workshop (Don)

• Still waiting for date.

3.3.   IMF Institute of International Finance (Don)

• APAC time zone meeting is also being considered.

3.4.   EU FinTech lab on digital identities (Mark)

• 18th. Mark will be attending it.

3.5.   EC DGConnect (Mark)

• 29th 14:30 CET. Nat has a conflict. He will respond to the thread.

3.6.   OSW2020 (Daniel)

• FDX is interested in presenting.

3.7.   SIOP Info Exchange (Nat)

SIOP Info Exchange meeting is to happen on the 25th of June at 2 PM UTC. Registration page TBD.

4.   External Organizations

4.1.   Australia (Stuart/Dima)

Going live next week. Limited rollout.

4.2.   UK (Chris)

• OBIE Steering Committee today. Hopefully, confirm the crisis implementation period ending in June.
• CMA 9 to go through the Certification: FAPI, Functional, CX.

5.   OAuth JAR (Nat)

• PRs https://bitbucket.org/Nat/oauth-jwsreq/pull-requests/
• What should be done for the case the value is not true.
• invalid_request
• default value is false.

6.   PRs for 1.0 (Dave)

7.   Multiple issuers (Joseph)

Chased OBIE for their implementation status. Waiting for their answer. Francis commented on FAPI ML. Relevant ticket: https://github.com/openid/fapi/issues/255

8.   FAPI 2.0 (Daniel)

PR https://bitbucket.org/openid/fapi/pull-requests/163/add-clarification-on-mix-up-mitigation/diff is adding issuer to the authorization response to mitigate Mix-up attack.

Brian pointed out that adding those parameters that are not in the core specification to a profile like this is problematic. Daniel and Brian agreed to start a mail thread in OAuth WG.

9.   AOB

The meeting was adjourned at 14:59 UTC.