<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">About the consumer identity discussion
for the next call:<br>
<br>
My view is that the KI Consumer Identity WG should probably be
shut down, since it has been inactive for the past year, and I
don't envision any activity in the future. The original goal of
the WG was to focus on prevention of consumer identity theft, as a
sort of continuation of the Liberty Alliance Identity Theft
Prevention SIG. However, identity theft / fraud is a hard nut to
crack, and only part of the problem is technical. So it's not too
surprising that the WG did not achieve much. A lot of the
identity theft problem involves poor security practices on the
part of service providers, as well as usability, costs, and
adoption of strong authentication methods for consumers. So it's
not clear that Kantara, with its focus on technical
interoperability certification and identity assurance
accreditation, is the right forum to address these problems. <br>
<br>
If others think there are consumer-oriented topics that Kantara
should address, let's discuss on the next call. If so, it might
be preferable to fold such activities into existing WGs or DGs. <br>
<br>
That said, I do believe that there are capabilities that an
identity ecosystem should support that could help to reduce
identity theft / fraud. I've written a position paper on the
topic, and you can find it here: <a class="moz-txt-link-freetext"
href="http://bobpinheiro.com/docs/NSTIC_and_IDTheft.pdf">http://bobpinheiro.com/docs/NSTIC_and_IDTheft.pdf</a>
Note that these are my own opinions and I'm NOT proposing that
Kantara should adopt them. I'd be happy to receive comments on
this paper from anyone, to help me recognize where I might have
gone astray. However, if we (especially in the US) are ever going
to be able to do high assurance online identity verification of
consumers for certain types of high value transactions, and move
beyond reliance on weak authentication methods such as passwords,
cookies, and self-selected challenge questions for consumers, I
think that the NSTIC Steering Group is the place to propose
solutions. So that's what I'm going to try to do.<br>
<br>
Bob<br>
<pre class="moz-signature" cols="72">---------------------------
Bob Pinheiro
Chair, Consumer Identity WG
908-654-1939
<a class="moz-txt-link-abbreviated" href="mailto:kantara@bobpinheiro.com">kantara@bobpinheiro.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.bobpinheiro.com">www.bobpinheiro.com</a></pre>
<br>
<br>
<br>
<br>
On 9/12/2012 6:26 PM, Heather Flanagan wrote:<br>
</div>
<blockquote cite="mid:50510C0D.8010706@kantarainitiative.org"
type="cite">
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
Hi all -<br>
<br>
From today's meeting, I caught the following discussion topics for
next week's strategy call. Note we will NOT be doing an Executive
Director report, a review of action items, WG reports, etc. This
is purely discussion on topics relevant to the future of the
Kantara Initiative and how Kantara responds to changes in the
Trust and Identity initiatives space(s).<br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<h2>Agenda</h2>
<ol>
<li><a moz-do-not-send="true"
href="http://kantarainitiative.org/confluence/display/LC/Roster"
rel="nofollow"
data-mce-href="http://kantarainitiative.org/confluence/display/LC/Roster">Roll
Call</a><br data-mce-bogus="1">
</li>
<li>Discussion<br>
<ol>
<li>Consumer Identity in the context of AntiFraud<br>
</li>
<li>Trust Framework Subcommittee</li>
<li>NSTIC</li>
</ol>
</li>
<li>AOB</li>
<li>Adjourn</li>
</ol>
<p><br>
Are there other topics that should go on the agenda? Any
reading material you would point people to for you proposed
agenda topic?<br>
</p>
<p>A formal agenda will of course go out prior to the call (same
time, same number).<br>
</p>
<br>
<pre class="moz-signature" cols="72">--
Heather Flanagan
Kantara Initiative
Skype: hlflanagan
email: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:heather@kantarainitiative.org">heather@kantarainitiative.org</a></pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
LC mailing list
<a class="moz-txt-link-abbreviated" href="mailto:LC@kantarainitiative.org">LC@kantarainitiative.org</a>
<a class="moz-txt-link-freetext" href="http://kantarainitiative.org/mailman/listinfo/lc">http://kantarainitiative.org/mailman/listinfo/lc</a>
</pre>
</blockquote>
<br>
<br>
</body>
</html>