Igor,
Interesting idea for AEMS implementation. Wondering if you have done threat modeling on this architecture. I see a lot of potential attack vectors that might break the protocol.
One concern is that the policy is separate from the email, so enforcement must be coded in the exchange protocol, which might not work as intended.

Regards,
ilyah

-----Original Message-----
From: WG-UMA <wg-uma-bounces@kantarainitiative.org> On Behalf Of wg-uma-request@kantarainitiative.org
Sent: Thursday, February 25, 2021 10:46 AM
To: wg-uma@kantarainitiative.org
Subject: WG-UMA Digest, Vol 140, Issue 13

Send WG-UMA mailing list submissions to
        wg-uma@kantarainitiative.org

To subscribe or unsubscribe via the World Wide Web, visit
        https://kantarainitiative.org/mailman/listinfo/wg-uma
or, via email, send a message with subject or body 'help' to
        wg-uma-request@kantarainitiative.org

You can reach the person managing the list at
        wg-uma-owner@kantarainitiative.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of WG-UMA digest..."


Today's Topics:

   1. Agenda for UMA telecon 2021-02-25 (Alec Laws)
   2. AEMS in less than 300 words (Igor Zboran)


----------------------------------------------------------------------

Message: 1
Date: Thu, 25 Feb 2021 08:38:15 -0500
From: Alec Laws <malcolm.laws@gmail.com>
To: "wg-uma@kantarainitiative.org WG" <wg-uma@kantarainitiative.org>
Subject: [WG-UMA] Agenda for UMA telecon 2021-02-25
Message-ID: <DD680E9B-5818-4335-AAC1-D970D34D4233@gmail.com>
Content-Type: text/plain; charset="us-ascii"

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-02-25

UMA telecon 2021-02-25
Date and Time
Alternate-week Thursdays 10:00am PT
Screenshare and dial-in: https://global.gotomeeting.com/join/485071053 <https://www.google.com/url?q=https://global.gotomeeting.com/join/485071053&sa=D&ust=1587939127766000&usg=AOvVaw0IKJhMu1jFQF_dSO_5fyK->
United States: +1 (224) 501-3316, Access Code: 485-071-053 See UMA calendar for additional details: http://kantarainitiative.org/confluence/display/uma/Calendar <http://kantarainitiative.org/confluence/display/uma/Calendar>
Agenda
Approve minutes of UMA telecon 2021-02-04 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-02-04>, UMA telecon 2021-02-11 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-02-11>, UMA telecon 2021-02-18 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-02-18>
Pensions Dashboard, any updates
UMA/Email proof-of-concept
Profiles Discussion, relationship manager AOB


- Alec
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kantarainitiative.org/pipermail/wg-uma/attachments/20210225/2d03b1e4/attachment-0001.html>

------------------------------

Message: 2
Date: Thu, 25 Feb 2021 17:45:15 +0100
From: Igor Zboran <izboran@gmail.com>
To: "wg-uma@kantarainitiative.org WG" <wg-uma@kantarainitiative.org>
Subject: [WG-UMA] AEMS in less than 300 words
Message-ID:
        <CADdXeAXEUYBHpF0tzU28=jEoE+qvDYpeC_mrZLUrUuXDfDBv7w@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

Hi UMAnitarians,

Please see the attached document. It is an excerpt from the upcoming draft-01.

Regards

-Igor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kantarainitiative.org/pipermail/wg-uma/attachments/20210225/712ca86d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: AEMS in less than 300 words.pdf
Type: application/pdf
Size: 49617 bytes
Desc: not available
URL: <http://kantarainitiative.org/pipermail/wg-uma/attachments/20210225/712ca86d/attachment.pdf>

------------------------------

Subject: Digest Footer

_______________________________________________
WG-UMA mailing list
WG-UMA@kantarainitiative.org
https://kantarainitiative.org/mailman/listinfo/wg-uma


------------------------------

End of WG-UMA Digest, Vol 140, Issue 13
***************************************


Any tax advice in this e-mail should be considered in the context of the tax services we are providing to you. Preliminary tax advice should not be relied upon and may be insufficient for penalty protection.
________________________________________________________________________
The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer.

Notice required by law: This e-mail may constitute an advertisement or solicitation under U.S. law, if its primary purpose is to advertise or promote a commercial product or service. You may choose not to receive advertising and promotional messages from Ernst & Young LLP (except for EY Client Portal and the ey.com website, which track e-mail preferences through a separate process) at this e-mail address by forwarding this message to no-more-mail@ey.com. If you do so, the sender of this message will be notified promptly. Our principal postal address is 5 Times Square, New York, NY 10036. Thank you. Ernst & Young LLP
_______________________________________________
WG-UMA mailing list
WG-UMA@kantarainitiative.org
https://kantarainitiative.org/mailman/listinfo/wg-uma