惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Attack and Defense Labs
Attack and Defense Labs
T
Threatpost
C
Cybersecurity and Infrastructure Security Agency CISA
H
Hackread – Cybersecurity News, Data Breaches, AI and More
I
Intezer
C
Cyber Attacks, Cyber Crime and Cyber Security
The Register - Security
The Register - Security
量子位
Security Latest
Security Latest
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
大猫的无限游戏
大猫的无限游戏
小众软件
小众软件
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
C
CXSECURITY Database RSS Feed - CXSecurity.com
MyScale Blog
MyScale Blog
J
Java Code Geeks
Apple Machine Learning Research
Apple Machine Learning Research
Google DeepMind News
Google DeepMind News
WordPress大学
WordPress大学
Spread Privacy
Spread Privacy
Jina AI
Jina AI
博客园 - 【当耐特】
P
Palo Alto Networks Blog
Last Week in AI
Last Week in AI
SecWiki News
SecWiki News
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
G
GRAHAM CLULEY
宝玉的分享
宝玉的分享
Hacker News - Newest:
Hacker News - Newest: "LLM"
T
The Blog of Author Tim Ferriss
V
Vulnerabilities – Threatpost
有赞技术团队
有赞技术团队
T
Tor Project blog
H
Hacker News: Front Page
A
Arctic Wolf
NISL@THU
NISL@THU
A
About on SuperTechFans
云风的 BLOG
云风的 BLOG
Engineering at Meta
Engineering at Meta
V
V2EX
N
News and Events Feed by Topic
Webroot Blog
Webroot Blog
Know Your Adversary
Know Your Adversary
P
Privacy International News Feed
I
InfoQ
D
Docker
L
LINUX DO - 最新话题
K
KPMG report finds enterprise disconnect between AI and its ROI | CIO
U
Unit 42

Comments for OpenID Foundation

OpenID Federation 1.0 Final Specification Approved - OpenID Foundation Public Review Period for Proposed OpenID Federation 1.1 Final Specifications - OpenID Foundation Public Review Period for Proposed Final EAP ACR Values Specification - OpenID Foundation Second Errata Set for OpenID Connect Specifications Approved - OpenID Foundation Industry Leaders Lead: Google Asks Developers to Migrate from OpenID 2.0 to OpenID Connect - OpenID Foundation General Availability of Microsoft OpenID Connect Identity Provider - OpenID Foundation Second OpenID Connect Implementer’s Drafts Approved - OpenID Foundation
Public Review Period for Proposed OpenID Federation 1.0 Final Specification - OpenID Foundation
Mike Leszcz · 2025-12-05 · via Comments for OpenID Foundation

The OpenID Connect Working Group recommends approval of the following specification as an OpenID Final Specification:


A Final Specification provides intellectual property protections to implementers of the specification and is not subject to further revision. This note starts the 60-day public review period for the specification draft in accordance with the OpenID Foundation IPR policies and procedures. Unless issues are identified during the review that the working group believes must be addressed by revising the draft, this review period will be followed by a fourteen-day voting period during which OpenID Foundation members will vote on whether to approve this draft as an OpenID Final Specification.

The relevant dates are:

  • Final Specification public review period: Thursday, December 4, 2025 to Monday, February 2, 2026 (60 days)
  • Final Specification vote announcement: Tuesday, January 20, 2026 (14 days prior to voting)
  • Final Specification voting period: Tuesday, February 3, 2026 to Tuesday, February 17, 2026 (14 days)


The OpenID Connect working group page is https://openid.net/wg/connect/. Information on joining the OpenID Foundation can be found at https://openid.net/foundation/members/registration. If you’re not a current OpenID Foundation member, please consider joining to participate in the approval vote.

You can send feedback on the specification in a way that enables the working group to act upon it by (1) signing the contribution agreement at https://openid.net/intellectual-property/ to join the working group (please specify that you are joining the “AB/Connect” working group on your contribution agreement), (2) joining the working group mailing list at https://lists.openid.net/mailman/listinfo/openid-specs-ab, and (3) sending your feedback to the list.


Marie Jordan – OpenID Foundation Board Secretary


On January 20, 2026 OpenID Federation 1.0 draft -47 was published. It incorporates feedback received during the review period including:

  • Acknowledged Pål Axelsson.
  • Added description of how to enable the use of the crit (critical) Claim within the definition of a kind of JWT.
  • Made section and figure titles more consistent.
  • Reordered some text to group protocol-independent text together and protocol-specific text together.
  • Applied suggestions from Nat Sakimura improving the descriptions of the "constraints" and "delegation" claims.
  • Fixed #317: Corrected Trust Chain example.
  • Applied clarifications identified while splitting the 1.1 specs.
  • Fixed Trust Mark Delegation validation to handle optional exp Claim.
  • Fixed #327: Use separate examples for Intermediate and OP Entity Configurations.
  • Changed some "iss" and "exp" dates in examples so they make better sense.
  • Changed "kid" values in examples to be plausible JWK Thumbprint values for their keys.
  • Added informative references to OpenID Federation 1.1 and OpenID Federation for OpenID Connect 1.1 specifications.

The OpenID Foundation (OIDF) is a global open standards body committed to helping people assert their identity wherever they choose. Founded in 2007, we are a community of technical experts leading the creation of open identity standards that are secure, interoperable, and privacy preserving. The Foundation’s OpenID Connect standard is now used by billions of people across millions of applications. In the last five years, the Financial Grade API has become the standard of choice for Open Banking and Open Data implementations, allowing people to access and share data across entities. Today, the OpenID Foundation’s standards are the connective tissue to enable people to assert their identity and access their data at scale, the scale of the internet, enabling “networks of networks” to interoperate globally. Individuals, companies, governments and non-profits are encouraged to join or participate. Find out more at openid.net.