August 2023 - Wg-pemc - mailman.kantarainitiative.org

TSA may be backing off trust of state issued mDL
by Tom Jones 05 Sep '23

05 Sep '23

In Iowa and Utah the state mDL can only be used at the airport with PreCheck from Sal https://x.com/tsa/status/1696644402708377893?s=12 ..tom

2 2

policy - a start
by Tom Jones 31 Aug '23

31 Aug '23

Policy - Policy here means digital representations of policy that apply to wallet - The wallet provider can create a default policy that the holder can modify - The holder can set conditions for what to display during consent process - The issuer can set policy that is a part of the credential - In that case the issuer can limit the wallets it provision with credentials to honor policy - The contract between the user and the verifier with request and consent - Could be considered to be a statement of policy that the verifier will honor ..tom

1 0

Policy can up in today's meeting
by Tom Jones 30 Aug '23

30 Aug '23

https://tcwiki.azurewebsites.net/index.php?title=Policy-Based_Access_Contro… This is the report i created over a year ago when i was working on it. ..tom

1 0

California has a shiny new app for its mDL
by Tom Jones 26 Aug '23

26 Aug '23

https://www.biometricupdate.com/202308/california-has-a-shiny-new-app-for-i… Looks like some states are doing it themselves. thx ..Tom (mobile)

1 0

SVIP Presentation
by Salvatore D'Agostino 24 Aug '23

24 Aug '23

IDmachines 1264 Beacon Street, #5 Brookline, MA 02446 +1 617.201.4809 @idmachines https://idmachines.com Please note I have a new email certificate, please update the public key you use for encrypted messages to me. It is part of this (S/MIME) email. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 1

Agenda for today’s call
by John Wunderlich 23 Aug '23

23 Aug '23

Good morning; I’m still working my way through the comments on the Draft Implementors Report. The main goal of today’s call is to start considering requirements. Please take look at the Requirements Coverage page: https://kantara.atlassian.net/wiki/spaces/PEMCP/pages/240025664/Requirement…. You will notice that we are missing requirements in a number of areas, so today’s session will be a brainstorming session to discuss the missing requirements. Starting next week we will resume reviewing the candidate requirements - starting with reviewing the process we have come up with to write, review, revise, and select requirements. Today’s agenda is here: https://kantara.atlassian.net/wiki/spaces/PEMCP/pages/246644737/2023-08-23+… Sincerely, John Wunderlich BA, MBA, CISA, CIPP/C, CIPM, FIP LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Cancelling today’s call
by John Wunderlich 16 Aug '23

16 Aug '23

I was hoping to have the final consolidated draft implementors report ready for final review and voting today, but the work has been delayed. Apologies for the late notice. Sincerely, John Wunderlich BA, MBA, CISA, CIPP/C, CIPM, FIP LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

privacy problem with blue tooth
by Tom Jones 16 Aug '23

16 Aug '23

Somehow the requirements need to address the problems with device-device connections. Does that need a separate set of codes? Here are some of the issues reported, but others relate to information leakage prior to the consent screen, which seems to be the case with a proposed standard from the OIDF. I believe it would apply to the details of 13018-5 as well. In summary - the interchange at the network level before the data interchange is initiated. https://www.foxnews.com/tech/detect-creeps-unwanted-bluetooth-tracker-googl… ..tom

1 0