• Start recording
• Welcome & antitrust notice
• Introduction of new members
• Agenda review

• Antitrust Policy Notice: Attendees are reminded to adhere to the meeting agenda and not participate in activities prohibited under antitrust and competition laws. Only members of ToIP who have signed the necessary agreements are permitted to participate in this activity beyond an observer role.
• New Members:

Reminder that the Technology Stack Working Group has a new mailing list. You need to join this as it involves the new charter that TSWG is operating under. You can do that here:

• https://lists.trustoverip.org/g/technology-stack-wg-2

  Scroll to the Bottom
  Click Green Button to log-in to the mailing list
  Then Click Blue Button to +Join the list

Discussion of Service Discovery Task Force (SDTF)

When we query a trust registry to answer "does this registered entity have ______ to do the thing?"
Is it:

• authorization; or
• permission

Do I check the Trust Registry for "authorizations" or "permissions"? Given the NIST definitions

Discuss...

NIST (NOTE: NIST has MANY definitions for authorization. Best is below):

• permission: Authorization to perform some action on a system.
• authorization: The right or a permission that is Access privileges granted to a system entity to access a system resource.

Note the circular nature of the definitions...

• an entity; conveys an “official” sanction to perform a cryptographic function or other sensitive activity.
  • TelegramSam  - leave in "cryptographic function".
  • Andor: does it add clarity (i.e. cryptographic function).
  • debate is about cryptographic vice gov+tech
    • implicit (leave out "cryptographic function" vs. explicit ("action uses cryptography").
  • possible - defer to NIST (leave as is) and see if that breaks thinking/flow.
    • RAISE issue - do we need something else (another term; revised definition).

DECISION: NIST "authorization" will be used as is. 

• Review decisions/action items
• Planning for next meeting