Attendees:
...
IAWG Chair Andrew Hughes called the meeting to order. Roll was called. Meeting was quorate. Andrew suggested dropping the 63b agenda item until Richard Wilsher can join a call to explain the proposal. All agreed.
Minutes approval: Andrew asked that everyone review the August 4 minutes carefully as they listed a lot of what we will present to ARB/KIBoD as our recommendations for updates to the Assurance Program. If there is anything in those minutes you are uncomfortable with - please speak up via email or at the next meeting!
...
General Updates: Michael shared that the roundtable put on by Jeremy Grant at FedID next month is open to all Kantara members. Promotional materials will be created and distributed to Kantara members when details are confirmed.
Assurance Updates: n/a
Discussion:
SAC Update
A reminder email went out today for the all-member ballot to approve the material CO_SAC changes IAWG approved in April. This is the final step before they are published. The eballot closes Thursday, August 18. There is a requirement that at least 15% of members vote. All Kantara members in IAWG should vote! The eballot can be found here.
63b SoCA Proposal
Richard walked the group through proposed changes to 63B#0650, #0660, and #0670. As the criteria is presently written, #0670 refers to a salt value - but that relates only to the circumstance above in #0660 (shall be salted and hashed with a value that has at least 32 bits). He proposes that we incorporate #0670 into #0660 - making the it an additional requirement when the secret has fewer than 112 bits of entropy. #0670 becomes no stipulation.
...
Michael asked for confirmation on where ‘Technical’ stands. The plan is to remove it but for now it will remain. The work needs to be done before it can be fully removed/integrated into the technical criteria. The goal is not to burden the assessors of the CSPs - but to streamline the process.
Any Other Business
IAWG leadership keeps an action item list.
All IAWG participants should be aware that the spreadsheet exists and it lists everything we think the IAWG is working on or planning to work on. Please feel free to review it and correct it if needed - it is not our intent to overlook something!
...