The completion of OpenID Federation 1.0 marks a significant milestone in enabling multi-lateral federation across various protocols, driven by community collaboration and real-world applications.
About:
Michael B. Jones is an independent consultant focused on digital identity, security, and interoperability.
Website:
Specializations:
Interests:
Incoming Links:
Subscribe to RSS:
The RFC 9864 specification for Fully-Specified Algorithms for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) has been published. It introduces fully-specified algorithm identifiers that eli...
The OpenID Federation 1.0 has been divided into two drafts to improve clarity while maintaining existing functionality, inviting community feedback for enhancements.
The author recounts his experience of logging into his wife Becky's Amazon account using a passkey saved on her iPhone while using Firefox on Windows 11. After encountering an invalid password message, he successfully navigates th...
Dr. Michael B. Jones discusses his decision to join Hawcx, a company focused on secure, passwordless authentication. He highlights his extensive work with WebAuthn and FIDO2 standards, noting both successes and ongoing challenges ...
The blog post discusses significant updates made to the JSON Web Proof, JSON Proof Algorithms, and JSON Proof Token specifications in preparation for the JOSE working group at IETF 123 in Madrid. Key updates include changes to alg...
The TIIME 2026 event in Amsterdam facilitated collaborative testing of OpenID Federation implementations among international participants, enhancing interoperability in identity management.
The post discusses the publication of a new version of the Updates to Audience Values for OAuth 2.0 Authorization Servers specification, which incorporates feedback from the OAuth working group during IETF 122. It addresses a secu...
A design team convened after the JOSE working group meeting at IETF 124 to discuss the JOSE HPKE specification. They made several recommendations, including not using 'enc' for Integrated Encryption, defining a new Key Management ...
Mike Jones facilitated discussions on OpenID Federation at the 2025 Internet2 Technology Exchange, engaging experts and sharing valuable insights from the sessions.
Emil Lundberg and Mike Jones have updated the Split Signing Algorithms for COSE specification, previously known as COSE Algorithms for Two-Party Signing. The new draft reflects feedback from IETF 122 and prepares for discussions a...
The OpenID Connect Working Group has initiated a two-week Working Group Last Call (WGLC) for the OpenID Federation 1.0 specification, allowing members to identify issues before finalization. The draft includes two new features: th...
The OpenID Connect Relying Party Metadata Choices specification has been approved as an Implementer’s Draft by the OpenID Foundation. This draft provides intellectual property protections for implementers and extends the Dynamic C...
The OpenID Connect Extended Authentication Profile (EAP) ACR Values 1.0 specification has been approved as a Final Specification by the OpenID Foundation membership. It ties together OpenID Connect, W3C Web Authentication, and FID...
0WGLC for JOSE and COSE HPKE Specifications
2025-06-05 • encryption ietf jose cose hpke
The text discusses the standardization of Hybrid Public Key Encryption (HPKE) and the efforts to bring HPKE encryption to applications using JSON Web Encryption (JWE) and COSE encryption. It mentions the registries for Key Encapsu...
The JSON Web Token (JWT) became RFC 7519 ten years ago, and it has been widely adopted. Efforts are underway to keep JWTs and their use secure for the next decade, with updates to the Best Current Practices specification and the J...
0Essential Moments in the OAuth and OpenID Timeline
2025-05-20 •
...
The text describes an OpenID Federation Interop Event at SUNET in Stockholm, where 30 participants from 15 countries performed interoperability testing among 14 different OpenID Federation implementations. The event included testi...
The Verifiable Credentials 2.0 family of specifications is now a W3C Recommendation, including the Verifiable Credentials Data Model v2.0, Securing Verifiable Credentials using JOSE and COSE, and Controlled Identifiers v1.0. Mike ...
Fully-specified algorithms are now the law of the land for JOSE and COSE, replacing previously registered polymorphic algorithms. The IANA JOSE and COSE registrations have been updated, and only fully-specified algorithms will be ...
The text is a keynote talk by Mike Jones at EIC 2025 about the use of digital credentials, discussing various engineering choices, usability, building ecosystems, and the importance of standards.
The 'Fully-Specified Algorithms for JOSE and COSE' specification has been updated to address feedback from IESG members and directorate reviews. The changes made include deprecating some polymorphic algorithm identifiers, providin...