October 2017 - WG-UMA - mailman.kantarainitiative.org

Fwd: [KI-LC] Fwd: Call for Participation: the DIACC Digital ID Design Challenge!
by Eve Maler 12 Oct '17

12 Oct '17

*Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl ---------- Forwarded message ---------- From: Ken Dagg <kendaggtbs(a)gmail.com> Date: Wed, Oct 11, 2017 at 2:04 PM Subject: [KI-LC] Fwd: Call for Participation: the DIACC Digital ID Design Challenge! To: "LC(a)kantarainitiative.org" <LC(a)kantarainitiative.org> All, For forwarding to your groups. Ken ---------- Forwarded message --------- From: DIACC Events <events(a)diacc.ca> Date: Wed, Oct 11, 2017 at 4:20 PM Subject: Call for Participation: the DIACC Digital ID Design Challenge! To: <kendaggtbs(a)gmail.com> Register Now [image: Register Now] [image: DIACC] <https://t.e2ma.net/click/ambvy/q6xuyw/62xsni> Call for Participation: the DIACC Digital ID Design Challenge! Hello DIACC members! You are encouraged to participate in the DIACC Digital ID Design Challenge, happening now and culminating at Identity North-Vancouver (November 7-8) The Digital ID Design Challenge (DIDC) is a competition that asks teams of students as well as professionals to address critical issues with digital identity inspired solutions. This challenge is hosted by the Digital ID & Authentication Council of Canada (DIACC) in collaboration with British Columbia’s Land Title and Survey Authority of British Columbia (LTSA), IdentityNORTH and the University of British Columbia’s Blockchain and Distributed Research and Education Cluster (Blockchain@UBC). Team registration is open through October 23, 2017. For more information on how to register and a description of the use case shaping the design challenge, please see our website: *https://diacc.ca/didc/* <https://t.e2ma.net/click/ambvy/q6xuyw/mvysni> Feel free to forward this message to your contacts. events(a)diacc.ca diacc.ca *Share this email:* <https://t.e2ma.net/share/outbound/e/ambvy/q6xuyw> <https://t.e2ma.net/share/outbound/t/ambvy/q6xuyw> <https://t.e2ma.net/share/outbound/f/ambvy/q6xuyw> <https://t.e2ma.net/share/outbound/l/ambvy/q6xuyw> *Manage* <https://app.e2ma.net/app2/audience/signup/1767350/1740288/1371530752/> your preferences | *Opt out* <https://t.e2ma.net/optout/ambvy/q6xuyw?r=aHR0cHM6Ly9hcHAuZTJtYS5uZXQvYXBwMi…> using *TrueRemove*™ Got this as a forward? *Sign up* <https://app.e2ma.net/app2/audience/signup/1767350/1740288.41292288/> to receive our future emails. View this email *online* <https://t.e2ma.net/message/ambvy/q6xuyw>. 720 King Street West, Suite 302 Toronto, ON | M5V 3S5 CA <#m_-6452059346211782168_m_-5985326744504748017_> This email was sent to kendaggtbs(a)gmail.com. *To continue receiving our emails, add us to your address book.* <http://kendaggtbs@gmail.com> [image: powered by emma] <https://t.e2ma.net/click/ambvy/q6xuyw/2nzsni> -- Kenneth Dagg Independent Consultant Identification and Authentication 613-825-2091 <(613)%20825-2091> kendaggtbs(a)gmail.com _______________________________________________ LC mailing list LC(a)kantarainitiative.org https://kantarainitiative.org/mailman/listinfo/lc

1 0

Release Notes have been updated
by Eve Maler 11 Oct '17

11 Oct '17

https://kantarainitiative.org/confluence/display/uma/UMA+Release+Notes These now reflect the changes through the (first) public comment period and the Disposition of Comments, and have had a more thorough edit generally. *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Meeting schedule for the rest of October
by Eve Maler 09 Oct '17

09 Oct '17

Because the second public comment period on the specs goes till Nov 12, putting the WG calls on hiatus till we get any comments or need to prepare for exiting that period seems to make the most sense for the moment. The Legal calls are going gangbusters, so those should continue. And I've got some travel. So... WG calls on Thursdays at 9am PT: - *Oct 12 no* - *Oct 19 no* (that's IIW) - *Oct 26* *maybe* (stay tuned) Legal calls on Fridays at 8am PT: - *Oct 13 yes* - *Oct 20 no* (I'm traveling and unavailable) - *Oct 27* *yes* I'll adjust the calendar. *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Notes from UMA Legal telecon 2017-10-06
by Eve Maler 06 Oct '17

06 Oct '17

https://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+not… 2017-10-06 Attending: Eve, Kathleen, Colin, Tim, Mark, John, Thomas Who on this call will be at IIW? John. We revised the existing train-track diagram in web and OmniGraffle form, and created new ones in the slides <https://docs.google.com/a/meshfire.com/presentation/d/1I12agEsfaJK3LEiJyROr…>. We're not quite done with the RPT diagram, and will also have to create "tear-down" versions. We may also want to create different diagrams for different use cases. We discussed to what extent terms of service/privacy notices ("ToS/PN" in the diagrams) are negotiable. Assuming they are currently not, thinking about the "cascading OAuth" use case where the main AS wants to either give access to resources that the RO doesn't want them to or vice versa, the RS would have to reserve some resources from central protection – which would be inconvenient for the RO. We discussed to what extent model clause text should be "mandatory" for the RqP side. We're not sure how our legal tools will be used; it could be that we should make the RO-side clause text "MUST" and the RqP side "MAY", but in practice it will all be discretionary to use. Maybe some parties picking it up for use will want to make it all mandatory. Note that some use cases will need clever parameterizing within the text, such as trying to require a service to allow "right to erasure" but ensuring allowance for the service to meet data retention requirements. Tim will be able to share the draft framework doc by next week. *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

UMA and Rebooting Web of Trust
by Adrian Gropper 06 Oct '17

06 Oct '17

The fifth Rebooting Web of Trust meeting concluded today. Led by Christopher Allen, we gather twice a year to advance standards for self-sovereign identity with trust rooted in distributed ledgers rather than federation. At this point there are five or six implementations based on four different blockchains that participate. Amazingly enough, after years of promoting UMA as a self-sovereign technology standard, this group has noticed and is poised to adopt UMA. The catalyst was the presence of Mark Miller as renowned evangelist for Capabilities-based security architectures. I suspect many UMAnitarains realize this is what we’ve been doing but Mark had not heard of UMA and I had not heard of Capabilities. A rushed summary of how UMA complements blockchain identity standards is here https://github.com/WebOfTrustInfo/rebooting-the-web-of-trust-fall2017/blob/… References at the end of this paper provide background on Capabilities design and link to the early standardization work by the Decentralized Identity Foundation that will likely shift to adopt UMA. At this point, the HIE of One project is the only implementation of self-sovereign identity combined with UMA. You can read our white paper at https://github.com/WebOfTrustInfo/rebooting-the-web-of-trust-fall2017/blob/… This discussion will continue at IIW where many of us in RWoT attend. However, let’s get the discussion started in this thread. Adrian -- Adrian Gropper MD PROTECT YOUR FUTURE - RESTORE Health Privacy! HELP us fight for the right to control personal health data. DONATE: https://patientprivacyrights.org/donate-3/

1 0

Legal telecon is on for tomorrow
by Eve Maler 05 Oct '17

05 Oct '17

There's been some seemingly unfortunate "SCCs water under the bridge <https://iapp.org/news/a/understanding-schrems-2-0/>" since last week (thanks to Mark L for the link), but we should press on with our framework nonetheless. Domenico and I have gone back and forth on some new graphical elements I can share with you. Tim, if you have any new text work,let me know and I can put it in GDoc. *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Considering our WG call tomorrow
by Eve Maler 04 Oct '17

04 Oct '17

Iif we have the UMA WG call tomorrow, on the docket would probably be a) coordinating IIW activities and b) further discussion about conducting interops. Who's interested and can attend? I'll wait till 2pm PT/5pm ET before deciding whether to hold vs. cancel the call. Thanks! *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

2 2

Extra params in permission ticket response
by Mike Schwartz 04 Oct '17

04 Oct '17

UMA Gurus, https://docs.kantarainitiative.org/uma/ed/oauth-uma-federated-authz-2.0-07.… Section 4.1 Resource Server Request to Permission Endpoint says "it has the following parameters". Can it have extra parameters? The OpenID Connect Core authentication request spec says "Other parameters MAY be sent." - Mike -- ------------------------ Michael Schwartz Gluu Founder / CEO mike(a)gluu.org https://www.linkedin.com/in/nynymike/

3 4