UMA telecon 2017-08-17
Date and Time
- Thursdays, 9-10am PT
- Screenshare and dial-in: http://join.me/findthomas
- UMA calendar: http://kantarainitiative.org/confluence/display/uma/Calendar
Agenda
Roll call
Approve minutes of ad hoc UMA telecon 2017-08-07, ad hoc UMA telecon 2017-08-08
- Schedule for upcoming weeks
- Can't meet Aug 24; substitute another time? (Domenico and Andi out too)
- Can't meet Aug 30; substitute another time? (Domenico out)
- Need to do any e-ballots for Draft Recommendations?
- UMA V2.0 work:
- Disposition of Comments/GitHub issues for V2.0/Grant swimlane/FedAuthz swimlane/Release Notes/UIG/Wikipedia/Grant rev 06/FedAuthz rev 06
- Email from Wednesday said:
- #347: UMA should not presume to know when scope is not an error (Grant Sec 3.3.4) -- This has to do with whether we should be in the business of definitively saying "it's not an error" when the client hasn't pre-registered for a scope it's requesting from the token endpoint. Please read the thread.
- #348: No means no! (Alice's right to revoke) (Grant Sec 3.6) -- This may be easy to decide if we think Alice's instructions to an AS mean that it's supposed to revoke all available tokens (assuming it's capable to do so), including refresh tokens. This could warrant a security consideration somewhere.
- #349: Undefined behaviour if submitted RPT for upgrade is invalid or expired -- Error path for RPT upgrading?
- #342: Security considerations could be made clearer (Grant Sec 5.2) -- The most efficient way to tackle this one would be for me to get offline help, e.g. from Justin, Cigdem, and/or others.
- Email thread from Wednesday on #340, impacting #350 (closed already but let's reopen based on new info/context) – also note additional edit needed regardless
- Candidate motion when we're ready: "Approve UMA 2.0 Grant rev nn and FedAuthz rev nn as amended by the instructions of UMA telecon 2017-xx-xx as Draft Recommendations and forward them to the Kantara Leadership Council to request immediate certification for an All-Member Ballot as Recommendations."
- UMA2 logo discussion (defer till we're in All-Member Ballot)
- AOB
Minutes
Roll call
Quorum was not? reached.
Approve minutes
Approve minutes of ad hoc UMA telecon 2017-08-07, ad hoc UMA telecon 2017-08-08
Schedule for upcoming weeks
- Can't meet Aug 24; substitute another time? (Domenico and Andi out too)
- Can't meet Aug 30; substitute another time? (Domenico out)
- Need to do any e-ballots for Draft Recommendations?
UMA 2.0 work
tbs
UMA logo
Deferred.
Attendees
As of 7 Mar 2017, quorum is 4 of 7. (Domenico, Sal, Andi, Maciej, Eve, Mike, Cigdem)
- tbs
Non-voting participants:
- tbs