Attendees:
Voting Participants: Andrew Hughes, Martin Smith, Mark King, Mark Hapner, Maria Vachino, James Jung, Michael Magrath
IAWG Members: Eric Thompson
Guests: Matt King
Proposed Agenda
Administration:
Roll call, determination of quorum
Minutes approval - 2022-06-16 Minutes
General Updates
Assurance Updates
Requests to IAWG for Comment
Discussion:
Assurance Program - finalize discussions
Process for addressing assessor/field reports on new methods not covered in 63-3
Any Other Business
Meeting Notes
Administrative Items:
IAWG Chair Andrew Hughes called the meeting to order. Roll was called. Meeting was quorate.
Minutes approval: Mark Hapner motioned to approve the draft minutes from the June 16 IAWG meeting. Martin Smith seconded the motion. The minutes were approved unanimously.
General Updates:
Identiverse happened last week. The Kantara overview session went well and was well attended.
Mark King attended a Zoom session where Kay was part of the British All-Parliamentary Group on identity. He also mentioned a new paper out - Paving a Digital Road to Hell. Interesting read with insightful observations.
Discussion:
Assurance Program - Classes of Approval/Service Descriptors Continued
Lynzie has not received the Trust Mark drafts yet. Will share when ready. Plan to be a simplification with the exact approvals listed.
IAWG leadership and KIBoD representatives have scheduled a planning meeting to begin discussion on holding the Relying Party Feedback meeting for input into NIST standards. Leadership will report back to IAWG with next steps after the July 8 planning meeting.
Richard Wilsher raised some questions via email after the previous assurance program discussions. He addressed our plan to drop the word “full” and replace it with each of the functional services. Blake Hall, ID.me, suggested keeping the word full in the descriptor to make it explicit. He believes it is particularly important for the public TSL to display this as viewers do not have the complete context of the approval like the IAWG does. Andrew believes this should be an okay modification.
The next email topic of federation authority will take additional reading/research. Federation authority refers to what a federation would need to do - it is not the same as NIST 800-63-3C. C is about security of transitions - not authorities.
Any Other Business