- Wg-ancr - mailman.kantarainitiative.org

Call reminder
by Salvatore D'Agostino 15 Jan '25

15 Jan '25

Hi WG, I hope everyone had an enjoyable and healthy holiday and that 2025 is off to a great start. We have our first call of the year today at noon. https://us06web.zoom.us/j/87282263538?pwd=K0RwY1g1b3pKeHdBcXpjeExVZUFpQT09 We will continue to focus on the completion of the Transparency Performance Report<https://docs.google.com/document/d/1XF5CQH7Z4hVVqcMPZPkTjgdIP-UQum8OWDlmaS8…> Specification. In addition we also want to complete WG elections and charter renewal this month. Anyone can self nominate, you can to so on the list or on our calls. Kantara membership is a requirement for a leadership role. I look forward to seeing you at Noon EDT. I will have to leave the call at about 1245 as I have a webcast at 1 today, so please be there for the start. Best, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

Fwd: [AEC] Canadian Affairs - Article on Auditor General's Report referencing DIACC
by Global Privacy Rights 11 Jan '25

11 Jan '25

FYI - Article Out with Sharon and Joni both quoted > Begin forwarded message: > > From: "Joni Brennan" <jbrennan(a)diacc.ca> > Subject: [AEC] Canadian Affairs - Article on Auditor General's Report referencing DIACC > > Date: 9 January 2025 at 12:21:10 GMT-5 > To: "DIACC Adoption Expert Committee" <aec(a)diacc.ca>, "DIACC Policy & Industry Engagement" <aec-pie(a)diacc.ca> > Reply-To: "Joni Brennan" <jbrennan(a)diacc.ca> > > Dear AEC and AEC-PIE > > At the close of 2024, a non-partisan Canadian (kitchen table) issues-focused news media organization, Canadian Affairs, contacted us to discuss the recent Auditor General's Report for a forthcoming article. It was an excellent opportunity to share our insight, and the nature of the reporter's questions further illustrated the public interest in the topic and the need for more accessible language education on the topics. The article is at the link below (registration is needed for access) and has been pasted for you to look at. > > Best, > > - Joni > > Link: https://www.canadianaffairs.news/2025/01/07/ottawas-efforts-to-create-digit… > > Ottawa’s efforts to create digital ID for citizens stalled: report > > A recent auditor general’s report says Ottawa has made little progress implementing a digital ID for citizens, despite years trying to do so(4 min read) > For years, Ottawa has been working to implement a national digital identification system that would offer citizens one secure key to unlock access to all its services. > > But the federal government is virtually no closer to realizing this vision than it was five years ago. > > That is the key finding of a recent report by Canada’s auditor general, whose audit revealed a government grappling with inadequate funding, bureaucratic impasses and privacy concerns. > > “They’re definitely not progressing as quickly as they ought to be,” said Teresa Scassa, a professor of information law and policy at the University of Ottawa. “The private sector is moving towards digital ID applications, and people are embracing them and adopting them. > > “And the government is just lagging behind.” > > Funding hurdles > > According to the auditor general’s report, the federal government has been working since 2019 to enable individuals to digitally validate their identity “to access services from all levels of government and elsewhere in the public and private sectors.” > > Ottawa’s aim is to implement a digital ID system that would replace nearly 90 separate sign-in portals managed by individual federal departments. The Canada Revenue Agency’s sign-in portal is one example of such a portal. > > The Treasury Board Secretariat — which in 2021 received a mandate to lead this work — has cited inadequate funding as the key reason for its slow progress. > > The report does not reveal how much the government has spent on this work so far. Employment and Social Development Canada, the agency to which questions about the report were to be directed, did not respond to multiple requests for comment by press time. > > Ottawa’s 2024 budget allocates $25 million over five years for Employment and Social Development Canada to establish a modern, single sign-in portal for federal government services. It is unclear whether this funding will be adequate. The report says the government does “not yet know what it will cost for departments to make that transition or how those costs will be funded.” > > “ I think $25 million is a very low number for what is so much digital transformation,” says Joni Brennan, president of the Digital ID & Authentication Council of Canada, a non-profit that promotes digital identification technologies. > > A 2018 study by the council pegged the potential value of implementing a “trusted digital identity” for Canadian citizens at one per cent of GDP, or $15 billion. The council’s study says its estimate is informed by evidence from other countries that have implemented a digital identity. These jurisdictions realized savings by reducing the cost of serving citizens, reducing fraud and reducing friction in the client experience. > > “Whether that’s me having to call to reset my password, or losing my password, or a data breach, for Canadians to be competitive at home and on the global stage, there’s massive opportunity here,” said Brennan. > > Scassa says there would be significant security benefits to adopting a standard digital identification. > > “Anything that’s a more secure form of access to government services is a good thing — better than scribbling passwords down here or there, forgetting passwords, using the same password over and over. … I mean, there’s a lot of things that are not particularly secure about how we do things currently.” > > Pushing back > > Not everyone is convinced that following in the footsteps of other advanced countries is prudent policy. > > “ Just because the other nations are doing it is no good reason for us to do it,” said Sharon Polsky, president of the Privacy and Access Council of Canada, a non-profit that promotes access to information, privacy and data protection. > > “ What happens when things go wrong? … Look at the unintended consequences. That is something most people don’t look at.” > > One of Polsky’s concerns is that digital identification protocols have the potential to undermine civil liberties. > > “ Everything you do leaves a digital trail everywhere you present it,” she said. “Geolocation, precise time. They’re collecting that information. What assumptions will they make from it? Will those assumptions be correct?” > > Polsky says it is possible for citizens to resist entirely transitioning away from analogue forms of identification, and notes that some people are already choosing to do so. > > “How many people your age are dumping their smartphones and going back to stupid flip phones because they’re sick and tired of being monitored, tracked and surveilled and being online all the time,” she said. > > Brennan says that the Digital ID & Authentication Council of Canada, which sets digital ID standards in Canada, takes seriously the issue of safeguarding Canadians’ personal information. The council includes representatives from government, financial institutions, payment networks and technology service providers. > > “ We are dedicated to putting Canadians’ values and privacy and data control and respect at the centre of [standards] design,” Brennan said. > > Lags behind > The auditor general’s report says Canada now lags well behind peer nations on digital identification development. > > In 2022, Canada ranked 32nd in the United Nations’ EGovernment Development Index, down from third place in 2010. The index ranks countries on their digital government capabilities, with a country’s score reflecting how well it leverages information technologies to improve public service delivery. > > Canada’s federal structure is one reason a unified digital identification has been difficult to implement, the report says. > > “ B.C. and Alberta are both further along in digital ID, and identity wallets in the case of B.C.,” said Scassa. “I think the risk that we run here is that we’re going to have … a fractured system like we often have in Canada.” > > “ [T]here needs to be an ecosystem approach,” said Brennan. But collaborative data governance remains a big challenge, she says. > > The provinces are the “data authorities” for most matters, she said, pointing to birth certificates and driver’s licenses as two examples. This leaves the federal government as the “consumer of identity from the provinces,” rather than the authority on data governance. > > Senior federal officials believe implementing a single sign-in system prior to developing a national approach to digital identity could make it difficult to later achieve interoperability between systems, according to the auditor general’s report. > > “They also acknowledged that the longer it takes, the more technically difficult and costly it will be,” the report says. > > -- > > DIACC puts people, privacy, and security at the heart of digital trust. > > - Discover the benefits: Read our [Big Book of Digital Trust Stories](https://diacc.ca/digital-trust-stories/). > - Lead the market: Achieve [Pan-Canadian Trust Framework certification](https://diacc.ca/trust-framework/). > - Stay informed: Tune in to our [Trust Talks & Digital Dives](https://diacc.ca/podcasts/) podcast. > - Connect with us: Follow DIACC on [LinkedIn](https://www.linkedin.com/company/mydiacc). > > Joni Brennan President | Président Working Hours: Pacific Time Executive Assistant: Xev(a)diacc.ca > [DIACC.ca](https://diacc.ca/) | [DIACC.ca/fr/](https://diacc.ca/fr/) > > My working hours may not be your working hours.Please reply within your regular working hours. > > -- > You received this message because you are subscribed to the Google Groups "DIACC Adoption Expert Committee" group. > To unsubscribe from this group and stop receiving emails from it, send an email to aec+unsubscribe(a)diacc.ca. > To view this discussion visit [https://groups.google.com/a/diacc.ca/d/msgid/aec/CAD3RuktWOybDZmODKhG334cKs….

1 0

Amazon mDL EUDI Paul Grassi event
by Salvatore D'Agostino 08 Jan '25

08 Jan '25

https://www.dock.io/live-event-amazon-paul-grassi?utm_campaign=Live+Panel+%… Best in 2025.. Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

4 3

Re: ANCR TPR - Next Steps.
by Salvatore D'Agostino 08 Jan '25

08 Jan '25

0 *H÷ 010 `He0 *H÷ $ÎContent-Type: multipart/alternative; boundary="----=_NextPart_000_001E_01DB61C9.B43DA060" This is a multipart message in MIME format. ------=_NextPart_000_001E_01DB61C9.B43DA060 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I agree with this. I believe we have gotten to this point already and are trying to publish the TPR Specification as such. From: Mark Lizar <mark(a)transparencylab.ca> Sent: Wednesday, January 8, 2025 12:21 PM To: Salvatore D'Agostino <sal(a)idmachines.com>; Gigi <gigi(a)transparencylab.ca> Cc: wg-ancr(a)kantarainitiative.org Subject: ANCR TPR - Next Steps. Dear ANCR, After having a break from the TPR report, and mulling it over. I think i have figured out how to disentangled the elements we have. I recommend, that we specify the report without the schema, and put the schema in the appendix, (take the rating from the appendix and put in the main document. Then I recommend we spin the schema up into a separate document (lightweight) as a digital identity controller record schema. In the context of a secure notice information record structure, for both security of industrial uses, non-personal information, as well as personal information. Then do a really nice security and privacy considerations section. we practically have two documents we can quickly finish and produce to a stable draft, and lots to blog about. Kind Regards, Mark Lizar Mark Lizar Executive Director Transparency Lab @ Global Privacy Rights ------=_NextPart_000_001E_01DB61C9.B43DA060 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta = http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 = (filtered medium)"><style></style></head><body lang=3DEN-US = link=3D"#467886" vlink=3D"#96607D" style=3D'word-wrap:break-word'><div = class=3DWordSection1><p class=3DMsoNormal><span = style=3D'font-size:11.0pt'>I agree with this.<o:p></o:p></span></p><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt'><o:p> </o:p></span></p><p = class=3DMsoNormal><span style=3D'font-size:11.0pt'>I believe we have = gotten to this point already and are trying to publish the TPR = Specification as such.<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt'><o:p> </o:p></span></p><div><div = style=3D'border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in = 0in 0in'><p class=3DMsoNormal><b><span = style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span><= /b><span style=3D'font-size:11.0pt;font-family:"Calibri",sans-serif'> = Mark Lizar <mark(a)transparencylab.ca> <br><b>Sent:</b> Wednesday, = January 8, 2025 12:21 PM<br><b>To:</b> Salvatore D'Agostino = <sal(a)idmachines.com>; Gigi = <gigi(a)transparencylab.ca><br><b>Cc:</b> = wg-ancr(a)kantarainitiative.org<br><b>Subject:</b> ANCR TPR - Next = Steps.<o:p></o:p></span></p></div></div><p = class=3DMsoNormal><o:p> </o:p></p><div><div><p = class=3DMsoNormal>Dear ANCR,<o:p></o:p></p></div><div><p = class=3DMsoNormal><o:p> </o:p></p></div><div><p = class=3DMsoNormal>After having a break from the TPR report, and mulling = it over. I think i have figured out how to disentangled the elements we = have. I recommend, that we specify the report without the schema, and = put the schema in the appendix, (take the rating from the appendix and = put in the main document.  <o:p></o:p></p></div><div><p = class=3DMsoNormal><o:p> </o:p></p></div><div><p = class=3DMsoNormal>Then I recommend  we spin the schema up into a = separate document (lightweight) as a digital identity controller record = schema.  In the context of  a secure notice information record = structure, for both security of industrial uses, non-personal = information, as well as personal information.  Then do a really = nice security and privacy considerations = section. <o:p></o:p></p></div><div><p = class=3DMsoNormal><o:p> </o:p></p></div><div><p = class=3DMsoNormal>  we practically have two documents we can = quickly finish and produce to a stable draft, and lots to blog = about. <o:p></o:p></p></div><div><p = class=3DMsoNormal><o:p> </o:p></p></div><div><p = class=3DMsoNormal><o:p> </o:p></p></div><div><div><div><div><div><di= v><div><diÍv><p class=3DMsoNormal><span style=3D'color:black'>Kind = Regards,<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'color:black'><o:p> </o:p></span></p></div><div><p = class=3DMsoNormal><span style=3D'color:black'>Mark = Lizar<o:p></o:p></span></p></div></div></div></div></div></div></div></di= v></div><p class=3DMsoNormal = style=3D'margin-bottom:12.0pt'><o:p> </o:p></p><div><div><div><p = class=3DMsoNormal><span style=3D'color:black'>Mark Lizar<br>Executive = Director<br>Transparency Lab<br>@ Global Privacy = Rights<o:p></o:p></span></p></div></div></div><p = class=3DMsoNormal><o:p> </o:p></p></div></body></html> ------=_NextPart_000_001E_01DB61C9.B43DA060-- ü0`0H BE#ÈDµ0 *H÷ 0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10 140116181223Z 340116181223Z0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10"0 *H÷ 0 §PÞ?=Ô3FñoQa²©Og]ÙSÝ(Ù×ðÿ®Crùµ]|ÁBá1PtÑ |Í!«Câ¬^nó Z2œ¢ëùè\ ìÿÒ¯q³ŽSNïŒœìO20K^WÄSÂöÙb+¿$bßÃž)KIx<`"üÚ6ÈÂ¢Ô,Tg5ns¿Xð€Ýå°¢&zÊà6¥õý·ï®?@õmZýÎ4Ê$Üt#]3]Ä%ö0Ý]àÕGœŽë¡»IIØ[óä$äbOOÁ¯tšÑrjzIÌŽFyÆ±ÚYúu!eÝVÎû«¥`ÄùR°œù+# #v;÷3áÉóiùK¢àNŒ~9÷Dp~þZå±¬ÑÌò5åIIÊVÉ=û};ÁÂMÉO7é¡jßb.Ë5Qy,È%8ôúK§\Òã 9Jt|ÕYÂ?N\Rô=÷Rñê£¬ýI4(óA:îèÞÿ_ºËèò¹P`À1ÓsåïŸ í3tŸ ÄglðzUFN§ô>áöØ á3d+c×2^ùÀ{xoŒùxz×rtUtx±ºánpºO ºhÃ{ÿ1ðs==*±A þMeky3Ž×£B0@0Uÿ0Uÿ0ÿ0UíDÀÓðî€{ŸBç&TÈ6v0 *H÷ ®2öŠK|Dva'(Í^Tï%Œãù)×®háXï..~SR¶\êºP×ßa æÎÁò7x°_³¢sž8Í>°žûÀÏ±òì--Ììª³ª`-;Ã=WužÓ0Í`ÓTñMfÀ]t@£î~ÂwèÁ§]RíÉÝ%mú©í£:4ÐY{ÚíPó5¿íëM1Ç`ôÚñâHâÆÅ7ûúuYf1G)Úvé®ï¹Q÷#ib<åU6×Tÿñ¹]ÎÔ#oØEJ[eïÝ§ Ë¥%Ž ùð¢ÒôÈt¡*HeÛÄâ%}ëŸ[ TQJSì]Ê3íbýEÇ/[ÜX 9æú×þŠí=JBtÔÃwYsÍFŸU8ïúè2êX"Þ8ÃÌŒmÉ3:j i? Èêrc#œm<àILª¢¹*6xíÃèFâ&YDuÙuQÍa`Ë]ù"Mæãö[»®ÍÊJk^óQát+é~'§ÙINø¥Û%cbÉ3gk<ÆÞšÍð7qò«üAõÁì7] åNïú±\8¥JáÜ8-<Ü«ÕJîÑplÌîôWøºn00 @žáê<zÌ>BO0 *H÷ 0:10 UUS10U IdenTrust10UTrustID CA A140 240425192606Z 260426192506Z0M1!0 *H÷ sal(a)idmachines.com1(0&UA01410C0000018F16B8E1DC00130CBB0"0 *H÷ 0 êPV_FŒÞÇYÞ»1w@ ÿÈÈr/näœ»uoBŠZ@^üÈ »wýVá!ó}gk° >:¥4:ütÅe"°³XÉº&XºðpÓ²>ºEÍ?z ¬b^5á¯ôRiÓïVOgLaèÕ².úrÑF~ÃöÕ?ô5,ËÅú2¯áâœú"EÆšŽ5õ4Åk~CP*ÒfnTnhÄÈ*£}ÞIºÝ€VÛÄTÞÄEh\8ºº ù]BÊÑÈQi1¢/vNþŠÆk'5²;6ÿËènë®0 |=£00Uÿ00Uÿ 0+x0v00+0$http://commercial.ocsp.identrust.com0B+…U#0ÂÔD qÏHVŸh8\§·÷EŒ0#U 00 g0 `Hù/0EU>0<0: 8 64http://validation.identrust.com/crl/trustidcaa14.crl0U0sal(a)idmachines.com0U6(Óqï/ØD@Ø;lmXæSE~0U%0 +0 *H÷ °`ó0Äùê2`'3V-ŠÔý.ÛvéñNF$~L/2A2õþèC(á£Ãüûdï\×î ;!)GùÓ¬NÍÏÐÖ®êòrš¥%]TaË#ÑQ÷²Ö/ªÆÛä$]IÙNØCÓ*Yµ°ôHàî+ÈŠå£ªaóòœyJl[RU*wœZºé%¹v9N6¬N}íà³so4=µ#Ü)}MÅQWãQüÊoHÖþÿ©ðMoÃŠÌ^ªê,®j³± Li;I)¡Øâ&È:÷€ôÿÕç<fëñA±°ßÙm°x~š-Çu<Îý>>U±5íkªmÀÇÏë|Ô`îMEa³©)&sGriûi=Ñïfhµîuø$ÐqÃ 6ÅÆ<A<šÄÞAr7À¢dŒÀ£0ŠbZÍ»ÄÏž.î£ú§Bì)! Ûª¬Éã#jÕäbßúätâV\1èÑÄN ÓÝÝ ^ÐGÜ]šb¹ÜÞFûn}Ácô2ŽÅ]OÝ 1ö)ÉË ."La\W!!ìRj[Ø@ðÒ{ìKÆ+ÜZ3Ù%¯Áf{"ÀË7WF¯\¬1vyÓŽÄ0ô0Ü @ÿÒiÚwÂéÕMM0 *H÷ 0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10 230816192846Z 330812192845Z0:10 UUS10U IdenTrust10UTrustID CA A140"0 *H÷ 0 è©õŒ±éäÙËíX€ËF`eð¬ûÃA`kX»0DÙ9bÜrÁñRñÕ×«²3È÷6u/!²Öa§? Œ§8lxn×î%ûf¬<²Ñ»X$=-Ÿà§ÆÍ£EðiùëžÅFÖ{ePH»òÒßqEK tG%£¹yP2`A6ìL[Nä\ÍÒ§»Ó À[:«CQR ãL|70ídj¢Et«¹}Ì u÷@ òxb× Æ°K=°1dªØØWÐ.ïvkª r Xý(bšFr|qG Ôñ³ÿ£|\3òÚtÈ:ÒXTßŒôBp`¡Â`@±[xoÄR^.W°ö@ÁÃé7¯Ì;Œ=Us¯Ø$YÂîníºË*tÅùÛò\ oþåê'Y. xp,¬\¿åù!³I.EÛË7ï¢±ßÔh[P:4£ÿ]|×2`vZXtZ+cÒŒ~ÚÖP!!4Ó3aózG]wËí=.DÜ"X¯jë]êq?å§â!»aææVBJFQCj)(ñ" êÀÈ"©&?žR§gßû--Ùùt=µK7w¬eÀ#×k%ã3Ö)ŠÁåwsšxh:ÂÝ 8Ÿmí&Û5®i"\OŽEÝ£ä0à0Uÿ0ÿ0Uÿ0+}0{00+0$http://commercial.ocsp.identrust.com0G+0;http://validation.identrust.com/roots/commercialrootca1.p7c0U#0íDÀÓðî€{ŸBç&TÈ6v0_U X0V0TU 0L0J+>https://secure.identrust.com/certificates/policy/ts/index.html0JUC0A0? = ;9http://validation.identrust.com/crl/commercialrootca1.crl0UÂÔD qÏHVŸh8\§·÷EŒ0AU%:08++ +7 +7 +7 0 *H÷ ò][i]ãR®hÝE#+ 9q7%,Lya`VRÐÛ|ìAs«ÊœkYPÄÜdw S_ÇS¡Šá°èö(1Ü@ žæŒ&tš-B9Ì§åÚTt³Ý¿xQ¿0_¬óã°lÏ>Çc@±]NDì[£]ùb9"fkj¬ØçÀÉ¬Å»µû]5O®šªJ}ø@/Sä":MÄ ¥ÜIpÎ-'- WÌ»/MNÎŸaŒ@,µtí ¿ÛøÎxÒ]ªK'Eh2»ëô¬EØÍìÁjìñK³Ô g£JGÌüž«b]aÕ6ì·»m>Ë¡Ér"HA)ãÔ®r"Dë$\4Áìwš"0ØëQ%DœÐgëZÏ]\×¹IŽ¶l#@0â èÜ;£_àº,÷íèjA=UéOÆ0üôÈÖAg!Y6 ô*s!YTÉŒ¿é©J^íxàÝN}ý+Š°L%Rmü?â/[ìs$ßÃÿeZ((ôjdÓ±x*EB;2SšDåêìÄXyÈÍÏ3ké/ÒysáÎZªf²žÍ~º£±}EÐ*)K]b8NU¢f1<080N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0 `He ¿0 *H÷ 1 *H÷ 0 *H÷ 1 250108173447Z0/ *H÷ 1" õ[.SwäBÂ^À¬-Ïº³ÔEp&T²±ºÆß0] +71P0N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0_*H÷ 1P N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0 *H÷ 100 `He*0 `He0 *H÷ 0 `He0*H÷ 0 *H÷ @0 `He0 `He0 `He0+0 *H÷ W ùÉÀµG±¥.¢·4Ôü~©äPãÉåõÑß;6 ÿòfåHw¬7ôŒÀKèÑþÛÑÎvÄ¢÷£Ç`Üh.A{ÒÔ-Ý[zÊñ}V]R÷@%æ^(GåQ±äœ:x€°7.þáe5kú ë@d5þdèjŒ8kæ8>KÓ¥ye8e¢zVùZÞæQB äÙ·è«>Ì0©BP&Àü6§rû5Ž@L;¯€¹"=±VÍH]O¡!<Éy¡IÏ ê«"×U3Ú2îÈuPÅF-¹H4Ãàð ÿý%

1 1

ANCR TPR - Next Steps.
by Smart Species Ltd 08 Jan '25

08 Jan '25

Dear ANCR, After having a break from the TPR report, and mulling it over. I think i have figured out how to disentangled the elements we have. I recommend, that we specify the report without the schema, and put the schema in the appendix, (take the rating from the appendix and put in the main document. Then I recommend we spin the schema up into a separate document (lightweight) as a digital identity controller record schema. In the context of a secure notice information record structure, for both security of industrial uses, non-personal information, as well as personal information. Then do a really nice security and privacy considerations section. we practically have two documents we can quickly finish and produce to a stable draft, and lots to blog about. Kind Regards, Mark Lizar

1 0

FW: [KI-LC] January 16th - Information Session - Kantara's shift to ISO 17065
by Salvatore D'Agostino 08 Jan '25

08 Jan '25

Another notice about Kantara investment in becoming ISO program, and how this is rolling out, first in the UK and then learning and adoption with other activities. From: Amanda Gay <amanda(a)kantarainitiative.org> Sent: Wednesday, January 8, 2025 10:55 AM To: wg-idassurance(a)kantarainitiative.org; arb-reviewers(a)kantarainitiative.org; Kantara Board of Directors <directors(a)kantarainitiative.org>; lc(a)kantarainitiative.org; staff(a)kantarainitiative.org list <staff(a)kantarainitiative.org> Subject: [KI-LC] January 16th - Information Session - Kantara's shift to ISO 17065 Good morning all: As many of you may know, Kantara plans to transition to following the ISO 17065 standard for assessments and certification in 2025, and we wish to provide as much information as possible to all parties via information sessions to review the benefits. On January 16th at 12PM EST, we are running a 1-hour session, and we welcome your participation. (For IAWG participants: This will occur on the usual Zoom link and serves as the weekly call.) There are many good reasons to provide assessments that follow this international standard, and as such, the session will cover: •• Overview of ISO 17065 •• Benefits for assessed companies •• What ISO 17065 covers and how this affects you •• What will Kantara do differently? •• A brief list of documents to be updated •• Q&A We are excited to see you on January 16th. Zoom details are below. RSVPs are unnecessary, but please contact staff(a)kantarainitiative.org<mailto:staff@kantarainitiative.org> with any additional questions. Also, feel free to forward to others who may benefit from attending! Zoom details: •• Date: Thursday, 2025 - January - 16 •• Time: 9:00 PT | 12:00 ET (time zone calculator<https://www.timeanddate.com/worldclock/converter.html>) o Please join the meeting from your computer, tablet or smartphone: https://zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 o Meeting ID: 931 6796 5850 o Passcode: 884696 o You can also dial in using your phone. Find your local number: https://zoom.us/u/aeg9vt8LSr<https://zoom.us/u/abUx61ivsc> Best, -Amanda -- Amanda Gay | Administrative Coordinator <https://docs.google.com/uc?export=download&id=1f_FyEBepOKYcAfkyIsaSFzguA7Tg…> Twitter: @KantaraNews LinkedIn: @KantaraInitiative *Please take a few minutes to complete the third annual DEIA survey<https://www.surveymonkey.com/r/3LPP3WL>!*

1 0

FW: [KI-LC] Cancelling - January LC meeting
by Salvatore D'Agostino 07 Jan '25

07 Jan '25

From: Alec L via LC <lc(a)kantarainitiative.org> Sent: Tuesday, January 7, 2025 10:35 AM To: Kantara Leadership Council <lc(a)kantarainitiative.org> Subject: [KI-LC] Cancelling - January LC meeting Hi all, I hope you all are well and were able to enjoy some restful days over the past few weeks We're going to cancel this month's LC meeting. Our next meeting is scheduled for Feb 18th @ 10 AM Please use this time to renew your group Charter, and complete your group Leadership Elections. It would be ideal if we all come to the February meeting with those items complete. All groups must complete these tasks every year. As a reminder, at least one of the Chair positions must be held by a Kantara member If you have any questions about this process, please let me and Amanda know Happy New Year! Best, - Alec Alec Laws CTO Engineering | IDENTOS Inc. <https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/pho…> (647)-822-1529<tel:(647)-822-1529> <https://cdn2.hubspot.net/hubfs/53/tools/email-signature-generator/icons/ema…> alec(a)identos.ca<mailto:alec@identos.ca> <https://uploads-ssl.webflow.com/650c9dbaffb52efc03fda0ca/656f37e5c28b666130…> <https://twitter.com/identos_inc> <https://www.linkedin.com/company/identos-inc/>

1 0

Fw: [WG-PEMC] Re: [OAUTH-WG] Alternative text for sd-jwt privacy considerations.
by Salvatore D'Agostino 26 Dec '24

26 Dec '24

Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: Tom Jones <thomasclinganjones(a)gmail.com> Sent: Thursday, December 26, 2024 8:26:16 PM To: David Waite <david(a)alkaline-solutions.com>; pemc kantara <Wg-pemc(a)kantarainitiative.org> Cc: peace(a)acm.org <peace(a)acm.org>; Watson Ladd <watsonbladd(a)gmail.com>; IETF oauth WG <oauth(a)ietf.org> Subject: [WG-PEMC] Re: [OAUTH-WG] Alternative text for sd-jwt privacy considerations. I am appalled! All humans must adapt to the consent plans of this small standards group! I for one do not plan to adapt - sorry about that! Peace ..tom jones On Thu, Dec 26, 2024 at 4:15 PM David Waite <david(a)alkaline-solutions.com<mailto:david@alkaline-solutions.com>> wrote: > On Dec 26, 2024, at 10:38 AM, Tom Jones <thomasclinganjones(a)gmail.com<mailto:thomasclinganjones@gmail.com>> wrote: > > This problem was clearly demonstrated by the California mDL hackathon where the default presentation was ALL DATA. That is the easiest path, so it remains the one most taken. We have known since standards were first introduced that they immediately create a drive to the bottom. This will be the fate of this standard as well. The most permissive interpretation will be the most common. The user's desires will not be met. > The consequence of splitting out the policy for controlling data release from the issuing authority is that the complexity that was the business logic for handling requests, determining if they are appropriate for the use case, prompting the user for consent, etc. is now all complexity pushed into the (likely third party) user agent. Architectures like PRIVACYPASS create individual solutions to release a particular type of information in the most privacy-preserving manner they are capable of. This sort of business logic is baked into the protocol, and the scope of implementation is thus boxed to solve that particular problem. The user agent can only work per the spec if it intends to work properly, and following the specification (hopefully) leads to a complete implementation. The majority of verifiable credentials systems proposed have no such bounds - which is one reason you are likely to see credentials often scoped to be issued only to specific, qualified wallets in production. Those specific user agents will enforce the required security and privacy requirements the issuer has for their credential. That is both their own policy logic to be enforced (such as a credential being bound to hardware), as well as their own requirements for appropriate user behavior (such as mandatory authentication and mandatory disclosure before the credential is released). That could include verifier authentication and having the holder agent confirm the verifier is authorized by the issuer to make the sort of request they are making - before a user consent prompt ever enters the picture. You could say that the captcha usage of privacy pass and AAMVA mDL usage are the same in that they develop trust frameworks that define the network of acceptable participants. I suspect however that the requirements for the latter contain significantly more requirements and potentially new technical works. A mDL hackathon has likely not set such policy or mandated that mDL and readers abide by it. They may not even have wanted to limit participants to having support for specifying complex queries (especially with the OpenID4VP query language changes which occurred recently). I’m not surprised a hackathon defaulted to a wide-open attribute policy. -DW

2 1

TPR
by gigi.agassini＠gmail.com 17 Dec '24

17 Dec '24

Dear ANCR WG Please find below the link of the tool to work with the WG, please feel free to make comments on it https://docs.google.com/document/d/1XF5CQH7Z4hVVqcMPZPkTjgdIP-UQum8OWDlmaS8K Gng/edit?tab=t.0 Thank you. Gigi Agassini

1 1

Fw: Thank you for registering for the "6th ISO/IEC Artificial Intelligence Workshop"
by Salvatore D'Agostino 13 Dec '24

13 Dec '24

Get Outlook for iOS<https://aka.ms/o0ukef> ________________________________ From: IEC Academy <academy(a)iec.ch> Sent: Friday, December 13, 2024 5:03 AM Subject: Thank you for registering for the "6th ISO/IEC Artificial Intelligence Workshop" Thank you for registering for this week’s ISO/IEC JTC1 SC42 workshop. If you were able to attend live, we hope you enjoyed the event. We are pleased to share with you the recording of the webinar on: https://www.iec.ch/academy/webinars/isoiec-artificial-intelligence-6th-work… Additional resources will be added to the JTC1 website in the coming weeks: https://jtc1info.org/technology/subcommittees/ai/workshops/ Best regards, Ian Gardner and The IEC Academy team [Icon Description automatically generated]<https://www.iec.ch/homepage> Ian Gardner Head of IEC Academy & Capacity Building T +41 22 919 0330 The IEC provides the expertise to keep technology safe and sustainable. IEC Standards and conformity assessment directly impact global trade and help to mitigate climate change. The IEC provides a global consensus platform for all participating countries, covering almost the entire world population. This message is confidential. It may also be privileged or otherwise protected. If you have received it by mistake, please let us know by e-mail and delete it from your system; you may not copy this message or disclose its contents to anyone. The integrity and security of this message cannot be guaranteed on the Internet.

2 1