David Bernick

[https://nodesecurity.io/advisories/module/remarkable]

Other than the gdocs, are there active conversations happening anywhere in writing? Or is this mostly FASP calls and the docs?

I'd like @cdvoisin to take first pass. Might also be worth having @mikael-linden look and chat...

@dvoet please add versioning info on top

Great if Mikael is a thumb, then once Craig says yes we're good to go.

@cdvoisin -- can you take a look?

A key philosophy that we ask across the AAI and Passport, without asking, is "Should a JWT, signed from a trusted source, full of visas from sources that can be...

Hi @jiaqi216, I've started this PR https://github.com/ga4gh/data-security/pull/41 to make sure that the GA4GH spec explicitly mentions JWT_only auth as a possible, and not recommended, method of auth. I feel, with...

Wait was this addressed before we ratified?

Yes this 1.2 PR is likely not valid from what’s being discussed now (4K passports) On Fri, Sep 10, 2021 at 3:54 PM dvoet ***@***.***> wrote: > Are there going...