...
- JB noted increased interest/activity around the notion of OAuth interop testing. Testing without an API makes it hard. Re-use current OpenID tests?
- BoldJB socialised the need for an eGov profile of OAuth - to close up security holes - basically a profile comprising 50% deployment, 50% profile rules.
- JB asks for deployment plans for OAuth from govs. AH thinks BC may be deploying OAuth in relation to key exchnage with SecureKey app. CW says it's on NZ's roadmap but no date set yet. RH: early discussion
- CW: Maybe an OAuth profile for a basic Authz use case would be useful.
- Italicized
4. Kantara, OIX and other meta-data aggregator projects
...