Hi all, We'll meet on *Oct 31st at 9ET *to further discuss this disclosure and confirm the impact and possible mitigations. If you'd like to join, please use this link: https://us02web.zoom.us/j/81074238809?pwd=wE5kiVPDbGZhIyO9eYKQAuRU54R6c9.1 Best, - Alec Alec Laws CTO Engineering | IDENTOS Inc. [image: mobilePhone] (647)-822-1529 [image: emailAddress] alec@identos.ca [image: twitter] <https://twitter.com/identos_inc> [image: linkedin] <https://www.linkedin.com/company/identos-inc/> On Tue, Oct 8, 2024 at 8:14 PM <eve@xmlgrrl.com> wrote:
Count me in.
Eve Maler | cell and Signal +1 (425) 345-6756 <+1-425-345-6756> Visit the Venn Factory <http://vennfactory.com/>
On Oct 8, 2024, at 6:13 PM, Alec L via WG-UMA < wg-uma@kantarainitiative.org> wrote:
Hi Gabriel, thank you for sharing this with the list
I'm certainly interested in knowing more about the vulnerability and how to address it in our implementation If other implementors would like the information, please reply here (or let me know directly) and we can coordinate an ad-hoc discussion on this topic
Best, - Alec
Alec Laws CTO Engineering | IDENTOS Inc. [image: mobilePhone] (647)-822-1529 [image: emailAddress] alec@identos.ca [image: twitter] <https://twitter.com/identos_inc> [image: linkedin] <https://www.linkedin.com/company/identos-inc/>
On Wed, Oct 2, 2024 at 10:01 AM Gabriel Corona <gabriel.corona@free.fr> wrote:
Hi,
While testing UMA 2.0, I found that the protocol was vulnerable to a vulnerability (which may not apply in some deployments).
It might be interesting to start by discussing this topic off-list in order to let the implementers the opportunity to implement suitable mitigations before public disclosure. Please let me know if you would be interested.
If you know the contact of any other implementers please let me know.
Regards,
Gabriel Corona
_______________________________________________ A Community Group mailing list of KantaraInitiative.org WG-UMA mailing list -- wg-uma@kantarainitiative.org To unsubscribe send an email to staff@kantarainitiative.org List archives -- https://mailman.kantarainitiative.org/hyperkitty/list/wg-uma@kantarainitiati... ______ Group wiki -- https://kantara.atlassian.net/wiki/spaces/WG-UMA
_______________________________________________ A Community Group mailing list of KantaraInitiative.org WG-UMA mailing list -- wg-uma@kantarainitiative.org To unsubscribe send an email to staff@kantarainitiative.org List archives -- https://mailman.kantarainitiative.org/hyperkitty/list/wg-uma@kantarainitiati...
Group wiki -- https://kantara.atlassian.net/wiki/spaces/WG-UMA