Secure Telephony Identity Revisited

Chairs

• Ben Campbell
• Robert Sparks
• Russ Housley

Actions (note-taking by Simon Castle)

• No expectations to review OOB for Service Providers, so will move
  forward

• Connected Identity

  • Jon Peterson to create a new draft, with the following elements
    addressed:

    • Request to add TFA (voice, allusion to messaging) use case
      for why it's useful
    • Add clarification about DIV PASSporT in the response only if
      there were matching DIVs in the forward chain
    • Add clarification that the IETF doesn't specify who must be
      trusted in the validation or why
    • Update draft to remove the remaining references to Cancel
    • Mention in the CDC case that it's important that this is
      opt-in, especially in the RCD case. To be added to the
      Privacy section.

  • After this should be good for WGLC.

• OCSP/stapling/short-lived certificates

  • Eric Rescorla (optionally) to propose another option

    • Email sent before the meeting concluded!

  • No-one objecting in the room to moving the short-lived draft
    forwards. Action to adopt.

  • Combine the OCSP and stapling, saying SHOULD NOT use without
    stapling.

• AOB: STIR for MLS

  • Jon Peterson planning to start putting together a draft
    alongside the MLS WG.
  • Looking for a team to set up a call and discuss and design.
    • Chairs to lead organising this team.