2023-01-18 Meeting notes

Aronson, Marc

Yes

Davis, Peter

Yes

D'Agostino, Salvatore

Hodges, Gail

Jones, Thomas

Yes

Krishnaraj, Venkat

Yes

Thoma, Andreas

Wunderlich, John

Yes

Auld, Lorrayne

Balfanz, Dirk

Chaudhury, Atef

Brudnicki, David

Dutta, Tim

Flanagan, Heather

Yes

Fleenor, Judith

Glasscock, Amy

Gropper, Adrian

Hughes, Andrew

Jordaan, Loffie

Regrets

LeVasseur, Lisa

Lopez, Cristina Timon

Snell, Oliver

Stowell, Therese

Tamanini, Greg

Vachino, Maria

Whysel, Noreen

Williams, Christopher

Yes

• Start the meeting.

• Call to order.

• Approve minute

• Approve agenda

@John Wunderlich 

Called to order: 13:02

Quorum reached: Yes

Minutes to approve:

• https://kantara.atlassian.net/wiki/spaces/PEMCP/pages/124715009 - approved

5 min.

Open Tasks Review

All

See updated https://kantara.atlassian.net/wiki/spaces/PEMCP/pages/111247424 update (previously assigned to @Tom Jones )

5 min.

Whitepaper update

@Heather Flanagan (Unlicensed)

Government-issued Credentials and the Privacy Landscape

• interviews underway

• Note that NIST 800-63 is adding the concept of diversity and equity, but there remains questions as to how you collect the data for equity and diversity while still protecting privacy. How do you do the equity balancing in an identity ecosystem?

50 min.

Draft Report Discussion

@John Wunderlich 

See Privacy Enhancing Mobile Credentials Workgroup Draft Implementor’s Report (v2)

• see updates to the Implementor’s Guidance Report Verifiers

• Goal is to wrap up this work in the next two-weeks. We have enough feedback that @John Wunderlich and @Heather Flanagan (Unlicensed) will work to finish this up and out for final comment to the group in February. Will prepare a formal comment submission form to collect feedback so we can dispose of the comments in an organized fashion. If the group has any comments on the existing text that they’d like included before final draft, please do so before the end of this week.

• After the Implmentor’s Guidance is done, we’ll be going back to the Requirements. Now that we have the framework of the three sections and ten principles, we can build the list of requirements for various stakeholders (verifiers, issues, and providers).

• After Requirements, we’ll develop profiles. If you’re building SDKs, which requirements fit that profile? What do you need to do to achieve certification?

Other Business

• Conference planning (EIC, Identiverse, other?). See also this informal list for 2023

• Christopher Williams has agreed to continue as Vice-chair; elections next call

Adjourn