[Openid-specs-risc] NIST 800-63-4 draft review

Mark Haine mark at considrd.consulting
Tue Sep 10 19:15:47 UTC 2024


Hi All,

You may be aware that NIST have published draft 4 of  800-63 “Digital Identity Guidelines” and are collecting feedback.

On the NIST publication page<https://csrc.nist.gov/pubs/sp/800/63/4/2pd> there are links to all of the documents.

The OpenID Foundation will be collating feedback from members and returning comments to NIST. Comments will be collected using a Google Sheet with a modified copy of the NIST Comment Template<https://docs.google.com/spreadsheets/d/1ZrgTetojhl5_ITzGaQMLt0NfgI5RAQUD/edit?gid=907386844#gid=907386844>.

For the Shared Signals Work Group the priority should look at 800-63A-4 as this document has specific references to “Fraud Management” (section 3.1.2.1 generally) and “communication of “suspected and confirmed fraud events” (section 3.1.2.1 parts 11 and 12 and 3.1.2.2 parts 3, and 6).  There are also references to fraud and shared signalling in 800-63C-4 but I don’t have specific references for you yet.

Finally we suggest the following timeline for us to work with:

  *   OIDF NIST 800-63-4 Interactive Workshops<https://openid.net/nist-800-63-feedback-sessions/>       19-20th September
  *   Deadline for OIDF feedback collection                27th September
  *   Deadline for collated feedback                               7th October (NIST deadline)

Best Regards,

Mark Haine

+44 (0) 777 555 0344<tel:+447775550344> | mark.haine at oidf.org<mailto:mark.haine at oidf.org> |
[OpenID Logo]<https://www.considrd.consulting/>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-risc/attachments/20240910/d43609b7/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6115 bytes
Desc: image001.png
URL: <http://lists.openid.net/pipermail/openid-specs-risc/attachments/20240910/d43609b7/attachment-0001.png>


More information about the Openid-specs-risc mailing list