2024-11-27 Meeting notes

Chaudhury, Atef

Jones, Thomas

Yes

Krishnaraj, Venkat

Thoma, Andreas

Wunderlich, John

Yes

Williams, Christopher

Regrets

Auld, Lorrayne

Aronson Mark

Balfanz, Dirk

Brudnicki, David

D'Agostino, Salvatore

Davis, Peter

Dowtin, Jazzmine

Dutta, Tim

Flanagan, Heather

Fleenor, Judith

Glasscock, Amy

Graaf, Irene

Gropper, Adrian

Hodges, Gail

Hughes, Andrew

Yes

Jordaan, Loffie

Yes

LeVasseur, Lisa

Lopez, Cristina Timon

McBride, Adam

Pasquale, Jim

Snell, Oliver

Stowell, Therese

Sutor, Hannah

Tamanini, Greg

Vachino, Maria

Whysel, Noreen

• Start the meeting.

• Call to order

• Approve minutes

• Approve agenda

@John Wunderlich

Called to order: 14:05

Quorum reached: No

Minutes to approve:

Open Tasks Review

All

Link to Recommendations (Commenter Link): Recommendations for Privacy Enhancing Mobile Credentials

Requirements Analysis

@Andrew Hughes

@Andrew Hughes has provided an requirements analysis

Open

Discussion

• Consider the use of the phrase “Authorized Processing” for the purposes of including consent plus other ways in which processing of credential data may proceed

• In the context of this document the normal and expected presentation of the credential is a tap (or possibly a QR Code).

  • The only time that credential data may be collected without a tap or without notice would be will a legal authority or by a bad actor - both of which are out of scope

• Requirements need to be read as a whole for a given actor in a given use case (i.e. an entity can’t pick and choose the requirements that they like.

• Normative as term should be read as a description of the future state of the system.

Comment Disposition

@John Wunderlich

Working throuch comments provided

Discussion

NOTE: Only Kantara Members can vote on approving report for publication. If you or your organisation are not Kantara members and want to vote, you will need to become Kantara members.

Implementors and Implementors Guidelines

All

Looking for organisations to volunteer to implement the requirements and self certify. This is a valuble first step towards ensuring that the requirements are practicable and may lead to usefull revisions

Adjourn