Mike Jones: self-issued
Musings on Digital Identity
- Website
- self-issued.info · all feeds from this site
- Feed URL
https://self-issued.info/?feed=rss2
Read it in your FeedListing reader
Or add to: Feedly Inoreader Raw feed
Latest posts
-
OpenID Connect Token Hash Algorithm Implementer’s Guide Published
The OpenID Connect working group has published the initial version of the OpenID Connect Token Hash Algorithm Implementer’s Guide 1.0. Thanks to Filip Skokan for writing this. Quoting from the Abstract: This OpenID Connect Token Hash Algorithm Implementer’s Guide 1.0 identifies…
-
Third Version of W3C Web Authentication (WebAuthn) is Now a Standard
The World Wide Web Consortium (W3C) has published the Web Authentication (WebAuthn) Level 3 specification as a W3C Recommendation, meaning that it now a completed standard. While remaining compatible with the Level 1 and Level 2 standards, this third version adds additional…
-
JOSE and COSE HPKE specifications continuing to progress
The JOSE and COSE HPKE specs, “Use of Hybrid Public Key Encryption (HPKE) with JSON Web Encryption (JWE)” and “Use of Hybrid Public-Key Encryption (HPKE) with CBOR Object Signing and Encryption (COSE)” are continuing to progress towards completion. The JOSE HPKE spec…
-
Progress Report on Handling an Actionable Security Vulnerability
I gave a presentation at the 2026 OAuth Security Workshop in Leipzig describing the actions we took when an actionable security vulnerability was discovered affecting numerous OpenID and OAuth specifications. Much of the information discussed was not previously public. As I…
-
Post-Quantum Signatures for JOSE and COSE
Congratulations to Mike Prorock and Orie Steele on the publication of “ML-DSA for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)” as RFC 9964! This is a major step forward towards enabling widely-available post-quantum signatures for the…
-
Final 1.1 OpenID Federation Specs
I’m pleased to report that the Final 1.1 OpenID Federation specifications have been published. These meet the demand for cleanly separating the protocol-independent OpenID Federation functionality from the protocol-specific OpenID Federation functionality for OpenID Connect. As…
-
OpenID Presentations at April 2026 OpenID Workshop and IIW
I gave the following presentation on behalf of the OpenID Connect Working Group at the Monday, April 27, 2026 OpenID Workshop at Cisco: OpenID Connect Working Group Update (PowerPoint) (PDF) And as has become traditional, I also gave this invited “101” session presentation at…
-
Presentation on the OpenID Federation Journey at TDI 2026
I gave the presentation “The Journey to OpenID Federation 1.0 and the Road Ahead” at the 4th International Workshop on Trends in Digital Identity (TDI 2026) in Verona, Italy. My talk abstract was: The OpenID Federation 1.0 specification was completed in February 2026 after a 9½…
-
Post-Quantum Presentation at TDI 2026
I gave the presentation “The Post-Quantum Apocalypse Is Already Upon Us” at the 4th International Workshop on Trends in Digital Identity (TDI 2026) in Verona, Italy. My talk abstract was: “The future is already here — it’s just not evenly distributed” is an apt description of…
-
FIDO2 CTAP 2.3 standard and Server Requirements published
The FIDO Alliance has published the CTAP 2.3 Specification. No breaking changes were introduced between CTAP 2.2 and CTAP 2.3. Implementations of CTAP 2.2 are thus conformant to CTAP 2.3, therefore, a decision was made to provide certification of CTAP 2.3 implementations and not…
-
Final OpenID Connect RP Metadata Choices Specification
The OpenID Connect Relying Party Metadata Choices 1.0 specification has been approved as a Final Specification by the OpenID Foundation membership. The declarations enabled by this specification give an OpenID Provider the information needed to successfully interact with a…
-
The Journey to OpenID Federation 1.0 is Complete
The final OpenID Federation 1.0 specification was published today. This marks the end of a nearly decade-long journey and the beginning of new ones. At the 2016 TNC conference, Lucy Lynch challenged Roland Hedberg, saying “If there is someone who should be able to bring the…
-
OpenID Federation Interop Event at TIIME 2026 in Amsterdam
Implementers of OpenID Federation gathered at the 2026 Trust and Internet Identity Meeting Europe (TIIME) unconference in Amsterdam on Friday, February 13, 2026 to test their implementations with one another. 12 people with 9 implementations and from 9 countries performed…
-
OpenID Federation Presentation at 2026 TIIME Unconference
I had the pleasure of presenting an overview of OpenID Federation during the 2026 Trust and Internet Identity Meeting Europe (TIIME) unconference in Amsterdam. It was the opening talk in a day dedicated to OpenID Federation – Friday, February 13, 2026. There were ~90…
-
Initial Drafts of 1.1 OpenID Federation Specs
The OpenID Federation 1.0 specification contains two kinds of functionality: Protocol-independent federation functionality used for establishing trust and applying policies in multilateral federations, and Protocol-specific federation functionality that can be used by OpenID…
-
COSE HPKE Spec Aligned with JOSE HPKE Spec
The “Use of Hybrid Public-Key Encryption (HPKE) with CBOR Object Signing and Encryption (COSE)” specification has been updated to align with pertinent changes recently applied to the JOSE HPKE specification. Changes in draft 19 are: Utilize distinct algorithm identifiers for the…
-
OpenID Federation Discussion at 2025 TechEx
I was encouraged by Pål Axelsson to hold an unconference discussion giving an overview of OpenID Federation during the 2025 Internet2 Technology Exchange conference in Denver. So I did so with a receptive and engaged group of participants yesterday, Thursday, December 11, 2025.…
-
My Unplanned Multi-Platform Passkey Adventure
I am my wife Becky’s password manager. I keep all of her passwords (and mine) in an encrypted Excel spreadsheet – something I’ve done since before password manager applications existed. Yesterday I had reason to log into her Amazon account to help her place an order for puppy…
-
Finishing the OpenID Federation 1.0 Specification
The OpenID Federation 1.0 specification has started its 60-day review to become an OpenID Final Specification. Draft 46 of the specification, which was published today, is the target of the 60-day review. Thanks to all who participated in the Working Group Last Call (WGLC)…
-
Design Team Decisions Applied to JOSE HPKE Specification
A design team formed and met after the JOSE working group meeting at IETF 124 in Montreal to discuss possible next steps for the JOSE HPKE specification. As recorded in the PR applying the decisions made, the design team produced these recommendations: Not use "enc" when…