...
We have started work on prototyping WebAuthn support in a new plugin project, and hope to see some concrete results from that by early next year. In parallel we are continuing work on smaller enhancements to the OIDC plugins driven by requests from members who are heavily utilizing that code, and as time permits also continuing with the static code analysis and remediation work that we spent time on for the IdP and OpenSAML this year. This process is labor intensive but has contined to flush out a lot of bugs so it has been a reasonable investment in time when we have the time to spend.
Another area of work right now is to automate as much as possible the process of building the Windows installers for the IdP and Jetty. These are quite labor intensive, often under pressure due to security vulnerabilities, so automating that process is very important for project maturity. Doing so securely, of course, is why it’s not easy.
The official announcement of the planned rate increases for non-NREN memberships for 2025 was sent to the members list, though the web site needs to be updated to reflect those plans. The work on estimating and proposing future budget options to the membership will take much of this month and the Board will be taking up that task in earnest in January.