CACTI notes of Tuesday, January 31, 2023
Attending:
Barry Johnson (Clemson), Derek Owens, Chris Phillips, Gareth Wood, Margaret Cullen, Kevin Hickey, John Bradley, Stoney Gan, Marina Kren, Les Lecroix, Kevin Mackie, Richard Frovarp
With: Kevin Morooney, Nicole Roy, David Walker, Steven Premeau, Steve Zoppi
Regrets: Rob Carter
Reminders
- Transparency is a critical part of CACTI's duty to the community. Please promptly approve, edit (or indicate reason for disapproval) of minutes after they are posted.
- We now have the required four approvals for all CACTI notes, thank you!
Pre-Read Materials:
- LastPass draft blog piece
Action Item Review:
Agenda
- Administrivia
- Please say your name when you start to speak, until we learn each others' voices
- Please ask colleagues to define terms, expand acronyms, etc, until we learn each others' jargon
- It's ok to challenge your colleagues in pursuit of quality of discourse. Hopefully in a nice way
- Please disclose any conflicts of interest you may have in any of the agenda topics, and potentially excuse yourself from the relevant conversations
- Please use the CACTI scribing doc
- Internet2 Intellectual Property Agreement reminder
- CACTI Charter pointer
- Agreements:
- Volunteer(s) to scribe (new standing item)
- Agenda bash
- Announcements
- Working Group Updates (email only) - Please share via email on the CACTI list ahead of time
- Thursday, Feb 2 at 4 p.m. ET - InCommon orientation with Kevin Morooney - all encouraged to attend
- Internet Identity Workshop April 18-20 in Mountain View, CA;
- OpenID meeting is scheduled for the Monday prior to the IIW meeting. OpenID Foundation meeting co-located on April 17
- Review of NIST SP800-63-4 with TAC and CTAB
- Main Business
- How to get your stuff on the CACTI agenda
- Email cacti@internet2.edu, Slack message, or reach out to Margaret, Kevin, or Nicole
- Past curation of identity topics can be found here:
- (redacted)
- Culmination of the above
- 20221207-ChrisPhillipsRobCarter-TandIOutlook2022.pptx
- CACTI meeting frequency and duration
- Overall goal is to encourage more collaboration and work outside of the meetings. Asynchronous
- Is there an optimal meeting time? Do we need to do a rotation to share the pain?
- Action item : Nicole Put together a Doodle poll for a once a month 2 hour meeting. Next meeting will be 4 weeks from now; the week of February 26th.
- First topic: Workshop on wallets in R&E?
- Preread material will be posted and suggestions are welcome.
- LastPass - related recommendations / blog update
- The repercussions of the LastPass breach remain unclear. We do not want to state more than what is known.
- Who is the target audience for the message and what is the specific message we wish to convey. Can LastPass be utilized as a lead in to discuss the more general theme of passwords?
- The document is open to anyone with thoughts on the subject. Deadline for completion is 2 weeks. Ready for March publication.
- Biometric concerns as an authentication factor.
- Privacy concerns
- Local biometrics - biometric information stored locally at device
- Remote biometrics - biometric information stored remotely.
- Interconnections between groups - CACTI rep to TAC, CTAB, eAC and vice versa
- Les LaCroix has been attending TAC meetings. Willing to be representative.
Next Meeting: NEW MEETING TIME! Wednesday, March 1, 2023, 18:30 - 21:30 UTC / 1:30 p.m. - 3:30 p.m. US EST