- Wg-pemc - mailman.kantarainitiative.org

Apologies for the last minute cancellation.
by john＠wunderlich.ca 21 May '25

21 May '25

1 0

Fwd: IIW40 Book of Proceedings! 🐝 Order a T-shirt! 🐶
by John Wunderlich 20 May '25

20 May '25

FYI Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN ---------- Forwarded message ---------- From: Phil Windley <phil(a)windley.org> Date: May 20, 2025 at 11:50 -0400 To: john(a)wunderlich.ca Subject: IIW40 Book of Proceedings! 🐝 Order a T-shirt! 🐶 > Book of Proceedings - Next IIW Dates > 147 Sessions * Notes Submitted 106 > Access the IIWXL Book of Proceedings Here > Full Session List * Notes * Photos * Identity Comic Strips * Demo Hour * Upcoming Regional Events * Links to Doc's Photos * and More > > Registration for Internet Identity Workshop XLI will open in late May > IIWXLI #41 October 28 - 30, 2025 > IIWXLII #42 Late April. 2026 > Order Your IIW XL or IIW Classic TShirts / Hoodies > via Amazon’s Merch on Demand > There are two IIW XL t-shirt designs: 1st HERE and 2nd HERE > Or get a Classic Logo (including original 2005) HERE > Limited styles are also available on the: > Japanese, Italian, UK, French, Spanish, and German Amazon stores. > Email Phil @ phil(a)windley.org with your request and we'll send you a link! > Thank YOU Again IIWXL Sponsors - We couldn't do it without you! > Copyright © 2025 IIW Foundation, All rights reserved. > > Want to change how you receive these emails? > You can update your preferences or unsubscribe from this list -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

UK govt pushes online safety regulations but commits major fumble on One Login | Biometric Update
by John Wunderlich 19 May '25

19 May '25

FYI: https://www.biometricupdate.com/202505/uk-govt-pushes-online-safety-regulat… Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

I don't see how to do privacy-enhanced mobile creds w/o good use cases
by Tom Jones 16 May '25

16 May '25

The entire idea of state-issued digital identifiers seems to be falling apart in the EU. The issue is that some values, like vehicle ID, need to be viewed, or accessed, even when the rest of the user's private data is not. The point is that data release permissions may be different for different data elements. The state of Washington has 200 different ways to grant privileges to subjects. Some states, BC, MD, Indonesia are using the wallet for multiple creds/purposes. This gets back to purpose, which the EU spec (OID4VP), does not require. If the purpose is not stated, the user must understand the purpose from the context, which may be very misleading as the state officer might be a traffic cop or wildlife enforcement. This gets us back to the Collingridge dilemma which describes the challenge of regulating new technologies. - Early stage: When a technology is new, its future impact is unclear, making regulation difficult. - Later stage: Once the technology is widely adopted, it becomes harder to control or modify. The one big flaw I see in ISO 18013-5 is that the wallet is not assumed to be trusted. The EU does require the wallet to be trusted. Perhaps PEMC needs a position on the wallet? 1. should it be trusted? (by issuer, holder, or verifier) 2. should it be considered to be the subject's agent? My recollection is that ISO assumes the issuer is responsible for the wallet Peace ..tom jones

1 0

Reminder: No PEMC call today.
by John Wunderlich 14 May '25

14 May '25

Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

privacy enhancing position from AAMVA
by Tom Jones 09 May '25

09 May '25

Big news from hashtag#EIC2025 <https://www.linkedin.com/search/results/all/?keywords=%23eic2025&origin=HAS…> yesterday: AAMVA (American Association of Motor Vehicle Administrators) <https://www.linkedin.com/company/aamva/> said on stage that they will forbid their members from enabling “server retrieval”, the hidden surveillance feature inside the new mobile driving license (MDL). This is big news. While no hashtag#MDL <https://www.linkedin.com/search/results/all/?keywords=%23mdl&origin=HASH_TA…> in production currently uses this “phone home” feature, it’s very existence in the ISO specification means that, in theory, the DMV could choose to be notified every time you use your MDL to prove your identity, age, or address. Given the wide range of scenarios where an instantly-verifiable digital identity credential like an MDL would be useful, this could be tantamount to a citizen-scale surveillance dragnet for the government: a massive invasion of privacy and curtailment of liberty. Thankfully, hashtag# privacy <https://www.linkedin.com/search/results/all/?keywords=%23privacy&origin=HAS…> advocates have been tirelessly shining a light on this risk, and with this clarification of policy we know that at least in the US the risk is somewhat reduced. How the rule will be enforced and what transparency measures will be in place are not yet clear, but this is a very positive step nonetheless. Peace ..tom jones

2 1

Useful reference
by Salvatore D'Agostino 05 May '25

05 May '25

Digital Travel Credentials<https://media.licdn.com/dms/document/media/v2/D4E1FAQGHDYQtKU9GKw/feedshare…> Have a even better than you'd ever expect day. Best, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

1 0

Rebuilding Trust in a Digital World: Why Credentials and Wallets Alone Are Not Enough
by John Wunderlich 02 May '25

02 May '25

FYI: https://www.linkedin.com/pulse/digital-identity-trust-governance-credential… Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Why I Emphatically Oppose Online Age Verification Mandates - Technology & Marketing Law Blog
by John Wunderlich 01 May '25

01 May '25

Hi Folks; It’s beginning to look like the PEMC work group is starting to flag on the work to develop conformance testing. Let’s revisit this at next week’s call. In the meantime, the following post came to my attention. It flags why, if we decide to proceed to extend the PEMC requirement to online scenarios, we will have to deal with questions like what privacy-protective online age verification looks like or whether it is possible. https://blog.ericgoldman.org/archives/2025/04/why-i-emphatically-oppose-onl… Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0

Reminder: PEMC Call Today
by John Wunderlich 30 Apr '25

30 Apr '25

I’m hoping to get quorum today so that we can talk about the conformance testing work we need to do. https://kantara.atlassian.net/wiki/spaces/PEMCP/pages/969703425/2025-04-30+… Have a better than expected day, John Wunderlich “The law, in its majestic equality, forbids rich and poor alike to sleep under bridges, to beg in the streets, and to steal their bread.” ― Anatole France Calendly: https://calendly.com/privacycdn LinkedIn: https://www.linkedin.com/in/privacycdn/ Bluesky: https://bsky.app/profile/privacycdn.bsky.social Mastodon: https://mastodon.social/@PrivacyCDN Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

1 0