November 2023 - Wg-pemc - mailman.kantarainitiative.org

Implementor’s report for workgroup vote
by John Wunderlich 11 Dec '23

11 Dec '23

Please find attached the Early Implementors Draft for workgroup vote: Next steps: 1 Workgroup Votes: • Vote Approve • Vote Approve with suggestions (include specific suggestions for final editing) • Vote Not Approve 2. Final Editing by leadership team (assuming majority of votes cast are Approve or Approve with suggestions) 3. Submit for publication On the agenda for tomorrow: 1. Developing a cadence and calendar for asynchronous development of requirement 2. Review of voting process Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

2 2

Apologies for the late cancellation
by John Wunderlich 29 Nov '23

29 Nov '23

Hello; Unfortunately, today’s call has to be cancelled. I will update you with respect to the publication of the Implementor’s report and moving forward on the guidance as soon as I have something concrete to report. My recovery is proceeding, and my ability to work is coming back, so I hope this delay won’t be extended. Apologies for any inconvenience. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

The Canadian Trust framework is not inclusive
by Tom Jones 23 Nov '23

23 Nov '23

The following is one example of standards that are not inclusive that need input of the sort we are trying to produce in Kantara. It subjects human holders of digital wallets to Trust Criteria that may well have the result of preventing human beings from accessing their rights and privileges. This is why I would like to see an early report on Inclusivity. "Digital Identity Ecosystems and their associated Trust Registries use a Trust Framework (such as the PCTF) to define how Issuers, Verifiers, Holders, and Digital Wallets should or must operate to be considered trustworthy." https://diacc.ca/trust-framework-components/pctf-trust-registries/ I requested a change and got the following responses: The Trust Framework defines the “how”, which may or may not include an entry in a Trust Registry. Holders belong on that list because they can be in a position to compromise the trustworthiness of an ecosystem. Additionally, a person may be the holder of credentials, a business may be a holder of credentials, an IoT thing may hold credentials, and the wallet may hold (be the holder) of credentials for a person or a business. In this context, a Holder is more than just a person. It's a person's decision whether they want to use a digital credential or not. Much like a person can choose to pay for an item with cash or use their biometrics on their smartphone to tap payment. A person's rights or privileges are not determined by this nor is it being insinuated nor is it being enforced on citizens. At the end of the day, it's the individual's decision and choice, which Canadians have and will continue to do so, how they want to interact with the digital ecosystem. Something that is not so evident in the countries you mentioned. [Russia and China] As we can see from the following example of a first nations grandfather seeking to set up a bank account for his daughter; underserved populations are AT RISK from thinking like the above. This is a good example of why technologists should not be permitted to define standards that impact normal people. They just have no clue! A Heiltsuk man, granddaughter handcuffed outside Vancouver bank settle human rights case against police. Vancouver: CBC. Retrieved from https://www.cbc.ca/news/canada/british-columbia/maxwell-johnson-granddaught… ..tom

1 0

The Face Is the Final Frontier of Privacy
by John Wunderlich 23 Nov '23

23 Nov '23

The burden should be on the verifier to ensure that the Holder can exercise their rights. Good quick read: https://time.com/collection/time100-voices/6338338/joy-buolamwini-ai-face-p… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminder: No call today
by John Wunderlich 22 Nov '23

22 Nov '23

Happy American Thanksgiving. 🍗 Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminders & References for next actions
by John Wunderlich 08 Nov '23

08 Nov '23

Two reminders: 1. There is no meeting today, as we have moved to a bi-weekly cadence 2. Voting is underway for the draft implementors report (see my prior email with the attached draft). Please send your vote (Approve, Approve with comments/suggestions, Reject) to john(a)wunderlich.ca cc's to williams.2560(a)gmail.com, and Hannah.sutor(a)gmail.com References: Nov 1 Minutes: https://kantara.atlassian.net/wiki/spaces/PEMCP/pages/283410433/2023-11-01+… Nov 15 Agenda: https://kantara.atlassian.net/wiki/spaces/PEMCP/pages/283738113/2023-11-15+… PEMC Requirements Coverage Google Sheet for submitting requirements: https://docs.google.com/spreadsheets/d/1yJ1B9fAXMsj1IGiI2tsAihxXvXhj7VUM0xj… Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0