...
Ken reminded WG participants that Kantara staff is ready to help them publicize their newsworthy activities via the @KantaraNews Twitter handle. Requests can be sent to Ken D or Kay C.
Discussion:
Finalize proposed criterion language regarding "comparable alternative controls."
Ken noted that in the absence of Richard Wilsher we would not likely be able to finalize the text for comparable alternatives, but asked the WG for any reaction to Jimmy Jung's email sent to the list today. Referencing the draft language for KI criterion 63A#0177, part (f), Jimmy proposed that "we might rather 'inform service's clients/consumers' than just 'make available to the service's clients/consumers' " the results of the CSP's determination of comparability of an alternative control. After some discussion, Ken suggested the following language:
(f) "Inform, directly or through a direct link, the service's clients . . ."
A questions was raised as to how the (CSP) service's (RP) clients would be made aware of the use of an alternative control if the CSP's service incorporated a component service that used an alternative control. Ken proposed that the main text of the criterion 63A#0177 be revised as follows:
"63A#0177 "If the CSP implements, or incorporates a component service that implements, comparable alternatives . . ."
The WG briefly discussed whether, if a CSP were to replace one component service in its offering with another (Kantara-certified) service, that would require recertification of the CSP's service. Ken stated the view that any change to a certified service would have to be notified to Kantara, and the ARB would determine if the change would require recertification or perhaps some lesser level of review. He thinks that replacement of a component service with one that incorporated a comparable alternative control would be considered a significant change in the CSP's service.
Ken closed the discussion of this item noting that he would bring the revisions discussed today to Richard W's attention so that any issues he might identify with the language could be resolved at the next IAWG meeting.
Finalize proposed text (if any) regarding use of "presentation attack detection" (PAD.)
RQ: were going to consult with RW and Kay present.
KD: postpone.
Short answer "no" but discussed clarification.
Varun: easy dynamics. familiar with PAD. wondered what KI was thinking.
RQ: 63-3b "should" And 90 percent.
KD: again let's wait.
Put to be by week of Sept 1,. to mid nov-start Dec. Need to meet on 19 and maybe 26th.
Confirmation of other non-substantive changes to criteria to be included in the package to be submitted.
kick to 19th
Varun Lal – thanks
Other Business:
Next Meeting: August 19, and then 26. In addition to the items noted above related to finalizing August 26 if necessary to finalize the criteria change package , we hope to get a report from ED Kay C. on her outreach to her contact at the the UK Digital Identity program. \for submission to Kantara review.
Ken adjourned the meeting at about 1:51PM US Eastern.
...