CACTI notes of Tuesday, January 31, 2023

Attending: 

Barry Johnson (Clemson), Derek Owens, Chris Phillips, Gareth Wood, Margaret Cullen, Kevin Hickey, John Bradley, Stoney Gan, Marina Kren, Les Lecroix, Kevin Mackie, Richard Frovarp

With: Kevin Morooney, Nicole Roy, David Walker, Steven Premeau, Steve Zoppi

Regrets: Rob Carter

Reminders

  1. Transparency is a critical part of CACTI's duty to the community. Please promptly approve, edit (or indicate reason for disapproval) of minutes after they are posted.
    1. We now have the required four approvals for all CACTI notes, thank you!

Pre-Read Materials: 

  1. LastPass draft blog piece

Action Item Review:

 Agenda

  1. Administrivia
    1. Please say your name when you start to speak, until we learn each others' voices
    2. Please ask colleagues to define terms, expand acronyms, etc, until we learn each others' jargon
    3. It's ok to challenge your colleagues in pursuit of quality of discourse. Hopefully in a nice way
    4. Please disclose any conflicts of interest you may have in any of the agenda topics, and potentially excuse yourself from the relevant conversations
    5. Please use the CACTI scribing doc
    6. Internet2 Intellectual Property Agreement reminder
    7. CACTI Charter pointer
    8. Agreements:
    9. Volunteer(s) to scribe (new standing item)
    10. Agenda bash
  2. Announcements
    1. Working Group Updates (email only) - Please share via email on the CACTI list ahead of time
    2. Thursday, Feb 2 at 4 p.m. ET - InCommon orientation with Kevin Morooney - all encouraged to attend
    3. Internet Identity Workshop April 18-20 in Mountain View, CA; 
      1. OpenID meeting is scheduled for the Monday prior to the IIW meeting. OpenID Foundation meeting co-located on April 17 
    4. Review of NIST SP800-63-4 with TAC and CTAB
  3. Main Business
    1. How to get your stuff on the CACTI agenda
      1. Email cacti@internet2.edu, Slack message, or reach out to Margaret, Kevin, or Nicole
        1. Past curation of identity topics can be found here:
          1. (redacted)
          2. Culmination of the above
            1. 20221207-ChrisPhillipsRobCarter-TandIOutlook2022.pptx
    2. CACTI meeting frequency and duration
      1. Overall goal is to encourage more collaboration and work outside of the meetings.  Asynchronous 
      2. Is there an optimal meeting time? Do we need to do a rotation to share the pain?
        1. Action item : Nicole Put together a Doodle poll for a once a month 2 hour meeting. Next meeting will be 4 weeks from now; the week of February 26th.
      3. First topic: Workshop on wallets in R&E?
        1. Preread material will be posted and suggestions are welcome.
    3. LastPass - related recommendations / blog update
      1. The repercussions of the LastPass breach remain unclear.  We do not want to state more than what is known.  
      2. Who is the target audience for the message and what is the specific message we wish to convey.  Can LastPass be utilized as a lead in to discuss the more general theme of passwords?
      3. The document is open to anyone with thoughts on the subject.  Deadline for completion is 2 weeks. Ready for March publication.  
      4. Biometric concerns as an authentication factor.  
        1. Privacy concerns 
          1. Local biometrics - biometric information stored locally at device
          2. Remote biometrics - biometric information stored remotely.
    4. Interconnections between groups - CACTI rep to TAC, CTAB, eAC and vice versa
      1. Les LaCroix has been attending TAC meetings.  Willing to be representative.

Next Meeting: NEW MEETING TIME! Wednesday, March 1, 2023, 18:30 - 21:30 UTC / 1:30 p.m. - 3:30 p.m. US EST



  • No labels