Page Comparison

...

Time	Agenda Item	Lead	Notes
5 min	Start recording Welcome & antitrust notice Introduction of new members Agenda review	Chairs	Antitrust Policy Notice: Attendees are reminded to adhere to the meeting agenda and not participate in activities prohibited under antitrust and competition laws. Only members of ToIP who have signed the necessary agreements are permitted to participate in this activity beyond an observer role. New Members:
5 mins	Review of action items from previous meeting	Chairs	Moved to next week
5 mins	Announcements	TF Leads	News or events of interest to members: None
5 mins	Reports	Open	KERIA Added support for admit message SignifyPy Added support for admit Added a script exercising multisig holder. KERIpy Upcoming database migration Upcoming witness migration GLEIF will be upgrading and managing keys for Root AID did:webs discussion around whois directory domain name permissions for a did:webs - Sam elaborated on issue in spec repo discussion about signatures in the did doc, one new did method is doing so.
25 mins	Discussion	Open	Nuttawut Kongsuwan : GLEIF's release was NOT Python, it is the TypeScript SDK. Securing x.509 Certificates with KERI: Schneier Article: Flaws in PKI Other articles https://www.redhat.com/sysadmin/pki-protection https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3425554 https://security.stackexchange.com/questions/71171/is-there-anything-preventing-the-nsa-from-becoming-a-root-ca Certificate Transparency - It can tell you there exists more than one for a domain name. DNS and BGP hijack to compromise the CA credential issuance flow Based on an Administrative Root of Trust vs a Cryptographic Root of Trust (like KERI) Adding alternative identifiers to x509 certificates in a non-normative manner. Could add KERI AID This would add a cryptographic root of trust to an x509 Diffee-Helman(sp?) key exchange (shared secret) used in place of out-of-band key exchange. Good idea 30 years ago, not good now that we have PKI
5 mins	Any other business	Open	Henk van Cann Following-up on Sam's explanation of the relation between identity assurance, reputational trust and attributional trust I added these glossary terms. Please feel free to comment / amend the glossary items: https://github.com/weboftrust/WOT-terms/wiki/identity-assurance https://github.com/weboftrust/WOT-terms/wiki/attributional-trust https://github.com/weboftrust/WOT-terms/wiki/reputational-trust
5 mins	Review decisions/action items Planning for next meeting	Chairs	Sam Smith to create a semantic naming document in the code - call it NAMING.md and check it in. Philip Feairheller follow up on KERIA issue

...

Versions Compared

Old Version 3

New Version 4

Key