May 2025 - WG-IDAssurance - mailman.kantarainitiative.org

Action#2 follow-up, per mtg of 2025-05-08 - Revised passkey Notice
by Richard G. WILSHER (＠Zygma Inc.) 08 May '25

08 May '25

Per as voluntold today by JWJ, I attach the proposed final text of a revised passkey Notice for the IAWG's attention, accommodating points raised today. I leave it to our Chairman to decide any period for review and process for formally pushing this over the fence into staff's domain. When that happens I believe the required staff actions to be: i) Publish the new notice (as v1.0); ii) Flag Notice KI#2024-01 as being withdrawn; iii) Publish a revised 63B_SAC incorporating #0085 and any other changes which have been previously agreed for 63B; That is all. Richard G. WILSHER CEO & Founder, Zygma Inc. www.Zygma.biz +1 714 797 9942

1 0

Action#1 follow-up, per mtg of 2025-05-08 - draft Comp.Alt criteria
by Richard G. WILSHER (＠Zygma Inc.) 08 May '25

08 May '25

I attach the present set of draft Comp.Alt criteria which I have modified in an attempt to accommodate needs identified two weeks ago. This is what I will be happy to re-introduce and walk the meeting through next week. Im going to re-state the background here and ask that those attending net week review this in advance so that we can avoid having to spend time setting the context. I understand second-hand that the ARB has in the past been presented with and approved services which have Comp.Alt elements. A set of criteria very similar to those presently posited was approved by the IAWG some three (?) years ago but did not get to being published. Faced with a client who had a Comp.Alt requirement I determined to apply structure to their solution and resurrected the criteria and inserted them into the assessment which I performed. Feedback from the ARB suggested that the use of the criteria was appreciated, the service was approved. I therefore sought to reintroduce the criteria into the IAWG so as to have them reviewed again, with the hope that they would be formally published. My purpose is to reflect the key elements of 800-63 rev.3 §5.4 in a manner which states what the CSP has to do to demonstrate comparability and to ensure that users of their service are left in no doubt as to the fact that a Comp.Alt is available and how to incorporate it into a broader identity management application/system. Moreover, to give CSPs, Assessors and the ARB a stable basis for addressing the topic. I believe that Assessors need to ensure that the determination of comparability has been reasonably established but cannot make risk decisions for the CSP, nor for the consumers of its service. The situation is just another form of risk management, which remains each individual enterprises determination. If someone wants to produce a white paper, thats fine, but I dont see it helping the goal of having a means to consistently assess Comp.Alts. Neither do I think it is the IAWGs role to come up with a shopping list of Comp.Alt. possibilities let the market decide, and KI will assess. Until next week, Richard G. WILSHER CEO & Founder, Zygma Inc. www.Zygma.biz +1 714 797 9942

1 0

Weekly IAWG Call
by Yehoshua Silberstein 08 May '25

08 May '25

Good morning all, There will be an IAWG call this week. Looking forward to seeing you to continue the discussion on comparable alternative criteria. IAWG - Weekly Group Call Kantara Initiative is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 Meeting ID: 931 6796 5850 Passcode: 884696 --- One tap mobile +16465588656,,93167965850#,,,,*884696# US (New York) +16469313860,,93167965850#,,,,*884696# US --- Dial by your location • +1 646 558 8656 US (New York) • +1 646 931 3860 US • +1 301 715 8592 US (Washington DC) • +1 305 224 1968 US • +1 309 205 3325 US • +1 312 626 6799 US (Chicago) • +1 689 278 1000 US • +1 719 359 4580 US • +1 720 707 2699 US (Denver) • +1 253 205 0468 US • +1 253 215 8782 US (Tacoma) • +1 346 248 7799 US (Houston) • +1 360 209 5623 US • +1 386 347 5053 US • +1 507 473 4847 US • +1 564 217 2000 US • +1 669 444 9171 US Meeting ID: 931 6796 5850 Passcode: 884696 Find your local number: https://us06web.zoom.us/u/kdk6YRUeBQ LOCATION https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 View map -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

2 2