Featured articles
Archive
Category: OpenID
Financial-grade API (FAPI) Security Profile Parts 1 and 2, and JWT Secured Authorization Response Mode (JARM), Have Entered Public Review Prior to the Implementer’s Draft Vote.
The OpenID Financial-grade API Working Group has recommended that the following draft specifications be approved as OpenID Implementer’s Drafts. Financial-grade API – P…
OpenID Certification Program Wins the 2018 EIC Award
Munich, May 17 — The OpenID Certification Program, a tool for verifying whether implementations of OpenID Connect conform to the specification, has received the “Best Innovation Aw…
I Will Speak at API Days Paris (January 30, 2018, 31 Days)
API Days Paris is the flagship API Days event, and this will be its 5th edition. More than 1200 API practitioners and experts will gather from around the world. This time, it will…
FAPI Part 2 Passes the Implementer’s Draft Vote
Thanks to everyone’s support, FAPI Part 2 has become an Implementer’s Draft. We were concerned that we might not reach quorum because more people than expected were on…
Please Vote on the Implementer’s Draft for FAPI Part 2
The OpenID Financial API (FAPI) Working Group has recommended that “Financial API – Part 2: Read and Write API Security Profile” be approved as an OpenID Implementer’s Draft.…
I Will Be Speaking at CIS Again This Year (2017/6/19, 6/22)
It is once again time for the Cloud Identity Summit (CIS). This year’s CIS is in Chicago. I will appear in 3 sessions. Please come join us. June 19, 2017 4:15 PM – 4:45…
Financial API — Please Vote on the Read-Only Security Profile!
The OpenID Foundation in the United States is currently holding an Implementer’s Draft vote, open until February 10, on “Financial API Part 1 — Read only security profi…
Public Review of “Financial API – Part 1: Read Only API Security Profile” Has Begun
The OpenID Foundation’s Financial API (FAPI) Working Group has recommended commencing a public review prior to the vote to approve Financial API – Part 1: Read Only API Security Pr…
Financial API — Part 1: Read Only Security Profile Is Undergoing Final Review Before the Implementer’s Draft Vote
The “Financial API — Part 1: Read Only Security Profile”, which is being developed by the OpenID Foundation’s Financial API WG (FAPI WG), is undergoing final review bef…
WPAD/PAC Attacks Against OAuth and Countermeasures
The WPAD/PAC Attack presented on August 3 at Black Hat 2016, which can read HTTPS URLs, is an attack that makes you think, “Ah, I see.” Instead of attacking HTTPS itself, the…
You must be logged in to post a comment.