- WG-IDAssurance - mailman.kantarainitiative.org

IAWG Meeting Cancellation - May 29th and June 5th
by Yehoshua Silberstein 28 May '25

28 May '25

Hi everyone, Tomorrow's IAWG meeting (May 29th) has been canceled as neither Andrew nor I are available. We are also tentatively canceling next week's meeting (June 5th) as I will be out of the country. We look forward to reconvening and seeing everyone at our next scheduled meeting on Thursday, June 12th. Thanks, Yehoshua -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

Meeting this week?
by Richard G. WILSHER (＠Zygma Inc.) 27 May '25

27 May '25

I don't recall seeing a calling notice ? Richard G. WILSHER CEO & Founder, Zygma Inc. www.Zygma.biz +1 714 797 9942

1 0

IAWG Meeting Cancellation - May 22nd
by Yehoshua Silberstein 22 May '25

22 May '25

Hi everyone, The IAWG meeting scheduled for Thursday, May 22nd, is canceled as we don't have any open agenda items. If you have a topic you'd like the group to discuss at next week's meeting, please submit your request to IAWG leadership. We'll keep you informed about future meetings. Thanks, Yehoshua -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

CSP participation in the IAWG
by Richard G. WILSHER (＠Zygma Inc.) 15 May '25

15 May '25

(Specifically adding Kay, though I suspect she sees IAWG threads) Re. the subject line: I agree with Andrew's comment on today's IAWG call that lack of CSPs is a perennial problem. I also agree with Michael's comment that it isn't a case of "which CSP do you want", it's a case of having a significant number of them attending consistently to actually make the WG an industry body, which is KI's purpose. I'm not comfortable with the small group of 'usual suspects' make decisions in the absence of meaningful CSP representation. Despite the best will in the World, it could lead to the perception and thus criticism that it's the Assessors making the decisions (I've heard of such comments being made, albeit second-hand, with the implication that such decisions are for the benefit of Assessors, which is pretty hard to comprehend). Would it be constructive for a communication to be sent by the Exec Directrice / Board to ALL Approved CSPs pointing out that KI *is* an industry body which needs support from those who seek its Approval services in defining how its services evolve? At the least, it would be a defence against potential criticism of how and which decisions get made. CSP's already on this list, please take note! Happy to help draft something if so requested. Richard G. WILSHER CEO & Founder, Zygma Inc. www.Zygma.biz +1 714 797 9942

1 0

Weekly IAWG Call
by Yehoshua Silberstein 15 May '25

15 May '25

Good morning all, There will be an IAWG call this week. Looking forward to seeing you and continuing our lively discussion on the updated passkey notice and comparable alternative criteria. IAWG - Weekly Group Call Kantara Initiative is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 Meeting ID: 931 6796 5850 Passcode: 884696 --- One tap mobile +16465588656,,93167965850#,,,,*884696# US (New York) +16469313860,,93167965850#,,,,*884696# US --- Dial by your location • +1 646 558 8656 US (New York) • +1 646 931 3860 US • +1 301 715 8592 US (Washington DC) • +1 305 224 1968 US • +1 309 205 3325 US • +1 312 626 6799 US (Chicago) • +1 689 278 1000 US • +1 719 359 4580 US • +1 720 707 2699 US (Denver) • +1 253 205 0468 US • +1 253 215 8782 US (Tacoma) • +1 346 248 7799 US (Houston) • +1 360 209 5623 US • +1 386 347 5053 US • +1 507 473 4847 US • +1 564 217 2000 US • +1 669 444 9171 US Meeting ID: 931 6796 5850 Passcode: 884696 Find your local number: https://us06web.zoom.us/u/kdk6YRUeBQ LOCATION https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 View map -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

1 0

Action#2 follow-up, per mtg of 2025-05-08 - Revised passkey Notice
by Richard G. WILSHER (＠Zygma Inc.) 08 May '25

08 May '25

Per as voluntold today by JWJ, I attach the proposed final text of a revised passkey Notice for the IAWG's attention, accommodating points raised today. I leave it to our Chairman to decide any period for review and process for formally pushing this over the fence into staff's domain. When that happens I believe the required staff actions to be: i) Publish the new notice (as v1.0); ii) Flag Notice KI#2024-01 as being withdrawn; iii) Publish a revised 63B_SAC incorporating #0085 and any other changes which have been previously agreed for 63B; That is all. Richard G. WILSHER CEO & Founder, Zygma Inc. www.Zygma.biz +1 714 797 9942

1 0

Action#1 follow-up, per mtg of 2025-05-08 - draft Comp.Alt criteria
by Richard G. WILSHER (＠Zygma Inc.) 08 May '25

08 May '25

I attach the present set of draft Comp.Alt criteria which I have modified in an attempt to accommodate needs identified two weeks ago. This is what I will be happy to re-introduce and walk the meeting through next week. Im going to re-state the background here and ask that those attending net week review this in advance so that we can avoid having to spend time setting the context. I understand second-hand that the ARB has in the past been presented with and approved services which have Comp.Alt elements. A set of criteria very similar to those presently posited was approved by the IAWG some three (?) years ago but did not get to being published. Faced with a client who had a Comp.Alt requirement I determined to apply structure to their solution and resurrected the criteria and inserted them into the assessment which I performed. Feedback from the ARB suggested that the use of the criteria was appreciated, the service was approved. I therefore sought to reintroduce the criteria into the IAWG so as to have them reviewed again, with the hope that they would be formally published. My purpose is to reflect the key elements of 800-63 rev.3 §5.4 in a manner which states what the CSP has to do to demonstrate comparability and to ensure that users of their service are left in no doubt as to the fact that a Comp.Alt is available and how to incorporate it into a broader identity management application/system. Moreover, to give CSPs, Assessors and the ARB a stable basis for addressing the topic. I believe that Assessors need to ensure that the determination of comparability has been reasonably established but cannot make risk decisions for the CSP, nor for the consumers of its service. The situation is just another form of risk management, which remains each individual enterprises determination. If someone wants to produce a white paper, thats fine, but I dont see it helping the goal of having a means to consistently assess Comp.Alts. Neither do I think it is the IAWGs role to come up with a shopping list of Comp.Alt. possibilities let the market decide, and KI will assess. Until next week, Richard G. WILSHER CEO & Founder, Zygma Inc. www.Zygma.biz +1 714 797 9942

1 0

Weekly IAWG Call
by Yehoshua Silberstein 08 May '25

08 May '25

Good morning all, There will be an IAWG call this week. Looking forward to seeing you to continue the discussion on comparable alternative criteria. IAWG - Weekly Group Call Kantara Initiative is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 Meeting ID: 931 6796 5850 Passcode: 884696 --- One tap mobile +16465588656,,93167965850#,,,,*884696# US (New York) +16469313860,,93167965850#,,,,*884696# US --- Dial by your location • +1 646 558 8656 US (New York) • +1 646 931 3860 US • +1 301 715 8592 US (Washington DC) • +1 305 224 1968 US • +1 309 205 3325 US • +1 312 626 6799 US (Chicago) • +1 689 278 1000 US • +1 719 359 4580 US • +1 720 707 2699 US (Denver) • +1 253 205 0468 US • +1 253 215 8782 US (Tacoma) • +1 346 248 7799 US (Houston) • +1 360 209 5623 US • +1 386 347 5053 US • +1 507 473 4847 US • +1 564 217 2000 US • +1 669 444 9171 US Meeting ID: 931 6796 5850 Passcode: 884696 Find your local number: https://us06web.zoom.us/u/kdk6YRUeBQ LOCATION https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 View map -- Yehoshua Silberstein | Senior Counsel, Product Compliance R&D yehoshua(a)proof.com (857) 577-8144 Notarize is now a Proof brand 🎉 We hope you love our new look and feel as much as we do! NOTICE: This email may contain proprietary, business-confidential, and/or privileged material. If you are not the intended recipient, please delete this message and notify the sender immediately. Any unauthorized use is strictly prohibited. This email does not constitute a signed writing for purposes of a binding contract.

2 2

Reminder: IAWG - Weekly Group Call
by Andrew Hughes 30 Apr '25

30 Apr '25

For May 1 2025, meeting at the regular time (12:00pm Eastern) Main agenda item: discuss comparable alternative topic. Please refer to email: https://mailman.kantarainitiative.org/hyperkitty/list/wg-idassurance@kantar… IAWG - Weekly Group Call Thursday May 1, 2025 ⋅ 09:00 – 10:00 Pacific Time - Vancouver Location https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 https://www.google.com/url?q=https%3A%2F%2Fus06web.zoom.us%2Fj%2F9316796585… Kantara Initiative is inviting you to a scheduled Zoom meeting. Join Zoom Meeting https://us06web.zoom.us/j/93167965850?pwd=dldoT0hYK1k4MkVGYkQ3TkNqdG1Idz09 Meeting ID: 931 6796 5850 Passcode: 884696 --- One tap mobile +16465588656,,93167965850#,,,,*884696# US (New York) +16469313860,,93167965850#,,,,*884696# US --- Dial by your location • +1 646 558 8656 US (New York) • +1 646 931 3860 US • +1 301 715 8592 US (Washington DC) • +1 305 224 1968 US • +1 309 205 3325 US • +1 312 626 6799 US (Chicago) • +1 689 278 1000 US • +1 719 359 4580 US • +1 720 707 2699 US (Denver) • +1 253 205 0468 US • +1 253 215 8782 US (Tacoma) • +1 346 248 7799 US (Houston) • +1 360 209 5623 US • +1 386 347 5053 US • +1 507 473 4847 US • +1 564 217 2000 US • +1 669 444 9171 US Meeting ID: 931 6796 5850 Passcode: 884696 Find your local number: https://us06web.zoom.us/u/kdk6YRUeBQ Guests Andrew Hughes carol(a)kantarainitiative.org david(a)kantarainitiative.co.uk james(a)kantarainitiative.co.uk kay(a)kantarainitiative.org yehoshua(a)proof.com eric.thompson(a)experian.com mmagrath(a)easydynamics.com

1 0

Revised passkeys Notice
by Richard G. WILSHER (＠Zygma Inc.) 29 Apr '25

29 Apr '25

Pfa a draft revised Notice (actually, presented as a replacement Notice) addressing passkeys, accounting for reviewed consideration and the arguments presented in JWJ's email of 04-24. For discussion this week, assuming there is a meeting to be held. A couple of critical elements to be finalized, as commented. Richard G. WILSHER CEO & Founder, Zygma Inc. www.Zygma.biz +1 714 797 9942

1 0