<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p></p>
<div>
<p class="MsoNormal">Hi all,<br>
</p>
<p class="MsoNormal">I have launched the openid-connect-server-webapp server and the demo client (simple-web-app).</p>
<p class="MsoNormal"><br>
I see that during the dynamical registration the client registered with the random client secret (For the example
<br>
JqnXxNQzuAIg1qR0EZXS3WKfdKmvcKowlrIMQ0E8bDXrjRJjZA5nSJTxAeGlAaKVNQ9Qv3zoEUzhYSJyLJeFHg)</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">1) How the secret passed from the server to the client?</p>
<p class="MsoNormal">2) According to my understanding it is shared secret (i.e. the symmetric encryption).</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Is it possible to use the asymmetric encryption to enable the trust between the openID client and the<span class="rphighlightallclass"> mitreid-connect</span> server?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Thank you in advance for your help.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Best regards,</p>
<p class="MsoNormal"><span style="mso-spacerun:yes"> </span>Michael</p>
<p class="MsoNormal"> </p>
</div>
<br>
<p></p>
</div>
</body>
</html>