July 9, 2020 Executive Committee Call Minutes

Present:
Don Thibeau, Executive Director
Mike Jones
Nat Sakimura
Bjorn Hjelm
John Bradley

Absent:
George Fletcher (on vacation)

Visitors:
Mike Leszcz, OpenID Foundation
Tom Smedinghoff, Locke Lord LLP


1.       Liaison Update
We are working on a liaison agreement between the Distributed Identity 
Foundation (DIF) and the OIDF.  DIF offered a proposed agreement, which Tom and 
Don are reviewing.  Nat could serve as an interim liaison officer.  Don plans 
to reach out to a potential liaison officer.


2.       Events
Nat is planning second SIOP workshop.  We had thought about Tuesday the 21st 
but are thinking of delaying it by a week due to the OAuth Security Workshop 
that week.

A FAPI/FDX Workshop is being planned.  FDX has already announced their adoption 
of OpenID Connect and are considering the adoption of FAPI and 
self-certification.

We have a three-hour slot for an OpenID Workshop during the OAuth Security 
Workshop.


3.       Certification Migration Update
Mike Jones reported on the status of the certification migration.  All but one 
of the existing profiles are in production in the Java suite; the one that's 
missing is third party-initiated login for RPs.  The certification results are 
now self-contained.  Roland Hedberg's service contract for maintaining the 
Python test suite finished at the end of June.  Members of the certification 
team have run tests on several implementations, some of which passed, some of 
which didn't.  There have been no OpenID Connect certifications using the Java 
code to date.

Mike Leszcz just reached out to everyone who had previously certified asking 
them to help us test the new test suite and reminding of them of the offer for 
free certifications.  Nat reported that Edmund Jay is working on testing the 
tests.  Mike Jones reported that Roland Hedberg plans to do so (although he's 
been busy making progress on OpenID Connect Federation lately).

Three of the six sets of instructions for testers for the new code are still 
missing.  RP testing instructions were posted by Serkan yesterday.

Mike Leszcz described how we are running out of the money budgeted for the 
certification migration work.  Mike Jones noted that we will not be spending 
more on the Python suite other than the hosting fees of about $1500/month.

Don reported that another potential budget stress is an OBIE/FAPI workshop 
being planned.  Although John pointed out that we can probably charge banks for 
participation.

Mike Jones asserted that it's not reasonable to expect for people to submit 
Java suite OP results without instructions on how to do so.  Don will reach out 
to Joseph about that tomorrow.  Worst comes to worst, Mike will take a stab at 
writing them with input from Edmund, and then ask the team member to correct 
the mistakes he made.

Mike moved: "We should all do everything in our power to get non-certification 
team members to run both suites ASAP, submit certification results, and provide 
feedback from their experiences."  The resolution passed unanimously.

Mike moved:  "We plan to turn off the Python suite once we have 5 Connect 
certifications or detailed sets of feedback on the tool with the new suite made 
by people other than those who wrote the Java code.  If this doesn't happen by 
the end of July, the EC will then reconvene to consider next steps."  This 
wording incorporated amendments suggested by Nat and John.  The resolution 
passed unanimously.


4.       Membership Update
One of the CMA9 banks in the process of joining the foundation.  Don is 
encouraging others to do so as well.


5.       Next Meeting
There will be an EC call on Thursday, July 30th at 3pm Pacific Time.

Attachment: July 9, 2020 Executive Committee Call Minutes.docx
Description: July 9, 2020 Executive Committee Call Minutes.docx

_______________________________________________
board mailing list
[email protected]
http://lists.openid.net/mailman/listinfo/openid-board

Reply via email to