[{"author": "Hannes Tschofenig", "text": "<p>Hi all!</p>", "time": "2024-05-07T16:00:24Z"}, {"author": "Hannes Tschofenig", "text": "<p>Life is a series of conference calls...</p>", "time": "2024-05-07T16:00:53Z"}, {"author": "Heather Flanagan", "text": "<p>Yeah. This is my third one of the day and it's only 9am.</p>", "time": "2024-05-07T16:01:24Z"}, {"author": "Justin Richer", "text": "<p>This is #4 for me but at least it's noon.</p>", "time": "2024-05-07T16:02:18Z"}, {"author": "Hannes Tschofenig", "text": "<p><span aria-label=\"grinning\" class=\"emoji emoji-1f600\" role=\"img\" title=\"grinning\">:grinning:</span></p>", "time": "2024-05-07T16:02:54Z"}, {"author": "Yaron Sheffer", "text": "<p>Am I the only one who doesn't see the slides?</p>", "time": "2024-05-07T16:04:19Z"}, {"author": "Priyanka Srirangam", "text": "<p>No, nothing</p>", "time": "2024-05-07T16:04:36Z"}, {"author": "Fabian Neumann", "text": "<p>yes, slides are fine for me</p>", "time": "2024-05-07T16:04:36Z"}, {"author": "Phil Smart", "text": "<p>I see slides</p>", "time": "2024-05-07T16:04:42Z"}, {"author": "Aaron Parecki", "text": "<p>i see slides</p>", "time": "2024-05-07T16:04:57Z"}, {"author": "Yaron Sheffer", "text": "<p>\"is being started\"</p>", "time": "2024-05-07T16:05:00Z"}, {"author": "Alan Buxey", "text": "<p>yes</p>", "time": "2024-05-07T16:05:24Z"}, {"author": "Yaron Sheffer", "text": "<p>yes</p>", "time": "2024-05-07T16:05:26Z"}, {"author": "Justin Richer", "text": "<p>Yes</p>", "time": "2024-05-07T16:05:26Z"}, {"author": "Fabian Neumann", "text": "<p>yes</p>", "time": "2024-05-07T16:05:27Z"}, {"author": "Priyanka Srirangam", "text": "<p>Yes</p>", "time": "2024-05-07T16:05:28Z"}, {"author": "Erwin Kupris", "text": "<p>yes</p>", "time": "2024-05-07T16:05:30Z"}, {"author": "Yaron Sheffer", "text": "<p>Well noted!</p>", "time": "2024-05-07T16:05:41Z"}, {"author": "Brian Campbell", "text": "<p>Justin, you are really quiet. Which is unusual :)</p>", "time": "2024-05-07T16:06:01Z"}, {"author": "Hannes Tschofenig", "text": "<p>FWIW I am taking notes.</p>", "time": "2024-05-07T16:06:58Z"}, {"author": "Aaron Parecki", "text": "<p>hannes we can barely understand you through the room echo, do you have a headset of some sort?</p>", "time": "2024-05-07T16:09:38Z"}, {"author": "Tim Cappalli", "text": "<p><a href=\"https://tcslides.link/oauthwg24-fedcm\">https://tcslides.link/oauthwg24-fedcm</a></p>", "time": "2024-05-07T16:09:42Z"}, {"author": "Hannes Tschofenig", "text": "<p>Yes, we can see the screen</p>", "time": "2024-05-07T16:11:27Z"}, {"author": "Justin Richer", "text": "<p>@Brian yeah firefox has been weird about my laptop mic lately for some reason</p>", "time": "2024-05-07T16:12:00Z"}, {"author": "Hannes Tschofenig", "text": "<p>I am using Firefox.</p>", "time": "2024-05-07T16:12:14Z"}, {"author": "Aaron Parecki", "text": "<p>the first rule of every meeting is the first 10 minutes are spent figuring out how to share slides</p>", "time": "2024-05-07T16:12:50Z"}, {"author": "Brian Campbell", "text": "<p>is APEX a well known term?</p>", "time": "2024-05-07T16:24:06Z"}, {"author": "Brian Campbell", "text": "<p>pun semi intended...</p>", "time": "2024-05-07T16:24:32Z"}, {"author": "Sam Goto", "text": "<p><a href=\"https://github.com/fedidcg/FedCM/issues/230#issuecomment-1067029200\">https://github.com/fedidcg/FedCM/issues/230#issuecomment-1067029200</a></p>", "time": "2024-05-07T16:33:14Z"}, {"author": "Sam Goto", "text": "<p>Here is the attack vector that was identified by Firefox and lead us to introduce the .well-known file.</p>", "time": "2024-05-07T16:33:29Z"}, {"author": "Sam Goto", "text": "<p>I have a reverse question to this group regard the client metadata endpoint: is it typical, in your experience, for clients to register with the IdP (and, for example, provide privacy policies and terms of services)?</p>", "time": "2024-05-07T16:35:50Z"}, {"author": "Aaron Parecki", "text": "<p>this client metadata slide could use some more context because i had the same questions as brian when i first saw it</p>", "time": "2024-05-07T16:35:57Z"}, {"author": "Sam Goto", "text": "<p>We looked at some of the big social login providers, which lead us to belief that that was the case, but I'm curious if that's also the case more broadly.</p>", "time": "2024-05-07T16:36:42Z"}, {"author": "Justin Richer", "text": "<p>Definitely typical to register, and do so statically. privacy and the like are not common in my experience, at least not required.</p>", "time": "2024-05-07T16:37:42Z"}, {"author": "Brian Campbell", "text": "<p><span class=\"user-mention silent\" data-user-id=\"545\">Justin Richer</span> <a href=\"#narrow/stream/245-oauth/topic/ietf-interim/near/118456\">said</a>:</p>\n<blockquote>\n<p>Definitely typical to register, and do so statically. privacy and the like are not common in my experience, at least not required.</p>\n</blockquote>\n<p>what he said</p>", "time": "2024-05-07T16:38:09Z"}, {"author": "Sam Goto", "text": "<p>There is a prototype behind a flag in Chrome Canaries that you could use to play with the Multi IdP API today.</p>", "time": "2024-05-07T16:39:31Z"}, {"author": "Sam Goto", "text": "<p>The IdP Registration API is also available behind a flag in Chrome Canaries (although, probably a little less stable / mature than the Multi-IdP API).</p>", "time": "2024-05-07T16:40:27Z"}, {"author": "Sam Goto", "text": "<p><a href=\"https://github.com/fedidcg/FedCM/issues/240#issuecomment-2004650817\">https://github.com/fedidcg/FedCM/issues/240#issuecomment-2004650817</a></p>", "time": "2024-05-07T16:43:10Z"}, {"author": "Erwin Kupris", "text": "<p>:)</p>", "time": "2024-05-07T16:48:07Z"}, {"author": "Justin Richer", "text": "<p>If anyone here has seen my \"Federation Bubbles\" talk in the last year, this is one realization of the onboarding process that we talk about in that project.</p>", "time": "2024-05-07T16:49:35Z"}, {"author": "Sam Goto", "text": "<p>any chance you have a link handy for slides/recording?</p>", "time": "2024-05-07T16:50:05Z"}, {"author": "Justin Richer", "text": "<p>sadly no, the places I've given the talk so far don't publish recordings :-/</p>", "time": "2024-05-07T16:54:10Z"}, {"author": "Yi Gu", "text": "<p>found this blog: <a href=\"https://justinsecurity.medium.com/federation-bubbles-3df0d4e433ff\">https://justinsecurity.medium.com/federation-bubbles-3df0d4e433ff</a></p>", "time": "2024-05-07T16:56:02Z"}, {"author": "Joseph Heenan", "text": "<p>You can use the proposed API with the authorization code flow as I understand it, which avoids PII flowing through the browser and I think avoids Guiseppe's concerns.</p>", "time": "2024-05-07T16:59:27Z"}, {"author": "Simone", "text": "<p>Ciao Giuseppe, nice point. We can discuss further. We have a github issue to track these concerns</p>", "time": "2024-05-07T16:59:32Z"}, {"author": "Brian Campbell", "text": "<p>nothing now</p>", "time": "2024-05-07T17:01:00Z"}, {"author": "Brian Campbell", "text": "<p>sorry</p>", "time": "2024-05-07T17:01:04Z"}, {"author": "Justin Richer", "text": "<p>@Yi - yes that's a blog post about the topic that fed into the talks :)</p>", "time": "2024-05-07T17:01:14Z"}, {"author": "Justin Richer", "text": "<p>thanks!</p>", "time": "2024-05-07T17:01:21Z"}, {"author": "Hannes Tschofenig", "text": "<p>Thanks!</p>", "time": "2024-05-07T17:01:40Z"}]