<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On Jan 15, 2014, at 8:46 AM, Nick Alexander <<a href="mailto:nalexander@mozilla.com">nalexander@mozilla.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">On 1/15/2014, 8:06 AM, Lloyd Hilaiel wrote:<br><blockquote type="cite">Yo all,<br><br>At present the new browserid-verifier codebase is ready for integration.<br><br>API documentation: <a href="https://github.com/mozilla/browserid-verifier">https://github.com/mozilla/browserid-verifier</a><br><br>Hosted API endpoint (development only): <a href="https://verifier.mozcloud.org/v2">https://verifier.mozcloud.org/v2</a><br><br>Note: This integration environment is two m1.small instances behind an ELB, for a little bit more reality.<br><br>FxA assertion formats can now be upgraded, here is a description of most of the changes:<br><br>1. we use un-padded base64url encoding *everywhere* now<br>2. principal.email is now “sub”<br>3. “sub” need not be a valid email address (note the trustedIssuers argument to the verifier above)<br>4. all times should be represented in seconds from epoch instead of ms<br>5. keys are serialized with a top level `kty` key (key type) instead of `algorithm`<br>6. s/RS/RSA/ && s/DS/DSA/<br><br>Who on the FxA side can take a look at this today and assess the work to migrate?<br></blockquote><br>These changes look fine but pointless for Fx 29. And I expect at least one bug to arise from moving from ms to s.<br><br>I've filed Bug 960110 to track the changes needed for the Android client.<br><br></blockquote><div><br></div><div>Desktop tracking bug: <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=960346">https://bugzilla.mozilla.org/show_bug.cgi?id=960346</a></div><div><br></div><br><blockquote type="cite">Nick<br><br>[1] <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=960110">https://bugzilla.mozilla.org/show_bug.cgi?id=960110</a><br>_______________________________________________<br>Dev-fxacct mailing list<br><a href="mailto:Dev-fxacct@mozilla.org">Dev-fxacct@mozilla.org</a><br>https://mail.mozilla.org/listinfo/dev-fxacct<br></blockquote></div><br></body></html>