Attendees:
Voting participants: Ken Dagg; Scott Shorter; Richard Wilsher; Mark Hapner; Jose Lopez; JJ Harkema;
Non-voting participants: Roger Quint, Unisys.
Staff: Colin Wallis
Quorum: 5 o 8. There was quorum as there were 6 voting participants of 8.
Minutes approval
2018-04-26 IAWG Minutes were approved by motion.
ED Update by Colin Wallis
- May 22 International Privacy Summit for Privacy in Marketing and Media
- May 14 Kantara European Members Plenary and AGM 2018. It´s was well attended. Kantara´s session was the second most attended, Blockchain session was the most well attended and Open ID Foundation was the third most attended session of the event.
- "Keep up with Kantara June" sent to members included: GDPR; Identiverse in Boston June 24-27; announcement of Webinars in the Summer Australian DTA and MDAV; encouragement to contribute into Standards Drafts for ISO SC27 Working Group 5.
- More information: Director´s Corner 2018: May
Discussion:
NIST 800-63-3 Implementation Guidance - 3 memos by Scott Shorter
Please see the memos here: Developing NIST 800-63-3 implementation guidance - 3 memos
- Zygma is a co-signer of the memos, recommendations.
- The 3 memos are findings found in the course of recent work that all the signers were involved with.
- First memo is around Guidance on Permitting “Commodity” Hardware for Unsupervised Remote Identity Proofing (“Commodity” word from 800-63-3 FAQ that came our recently).
- Second memo how to select and evaluate Authoritative Sources. Geolocation is presented as an additional barrier against international fraud. No id proofing method is perfect and Compensating controls are not perfect either, Geolocation is easy to assert but hard to prove, but it´s an additional barrier for catching the fraud.
- Third one derived from the other 2, recommendation to additional info for the CSPs in the Trust Status List, using the Public Service Description of the S3A for RPs and other potential consumer of the services to understand what´s involved.
- RW pointed out that the last statement of memo 3 is different from memo 2. He added that there are 2 solutions, S3A is not the absolute path for the additional information.