2023-04-13 Minutes

Attendees:

Voting Participants: Andrew Hughes [Ping], Denny Prvu [RBC], Mark Hapner, Maria Vachino [Calvert Consulting], Martin Smith, Michael Magrath [KUMA], Jimmy Jung [Slandala], Mark King
Other Participants: Eric Thompson [Experian], Jazzmine Dowtin [IDEMIA], Roger Quint, Mike Horkey [NextGenID], Lisa [USPS]
Staff: Kay Chopard, Lynzie Adams

Proposed Agenda

1.  Discussion: 

   • Revision 4 comment review - Draft Comments, Responses to NIST Questions to be reviewed

2. Any Other Business

Meeting Notes 

IAWG Chair Andrew Hughes opened the meeting.

Discussion:

Revision 4

Andrew began the session by reviewing his comments - dealing with terms & definitions in the base volume. He explained his reasoning and discussed with the group. All comments were approved to remain in the submission.

The discussion went back to 63a to get through what we could in the time allotted. Those criteria that were flagged as potentially problematic were prioritized. The first discussion was a comment requiring person to person interaction at IAL2. It was flagged as being too high a bar for IAL2. After discussion, it was agreed that the risk should be noted and with a risk analysis a potential solution should be provided. Maria & Martin voiced concern it was too high a bar.

There was another larger discussion about retention of captured video and the potential access to hackers. Jimmy feels it isn’t saying you have to retain it, that you could capture it and look at it later. He agrees it shouldn’t be required to capture and retain but doesn’t think that’s the intent of the section. Mike H. agrees that isn’t not a requirement… but that it allows you to and you should not be allowed to retain captured video of that session. Mike suggested a highly controlled retention option but Andrew believes that’s likely covered throughout the document. The comment remained with a note for consideration.

Due to time constraints, we had to abandon the remaining 63a comments and move to the other flagged comments. It was agreed to remove a comment in the base volume that suggested removal of IAL1. Maria felt strongly that we fought hard to have that included and it should remain. There were multiple comments on limiting consecutive fails. After discussion it was decided to merge the comments and leave the proposed suggestion at 5.

All remaining undiscussed comments will be included in the Kantara submission. Lynzie will proofread, format, and prepare to be sent tomorrow. Andrew will draft a cover letter for the submission. All will be posted on the wiki once submitted. Submission can be viewed here.