29 April 2024

Attendees

  • Andy Parsons, Adobe

  • Andy Rosen

  • Carly Huitema, U of Guelph

  • Charlie Halford, BBC

  • Christian Paquin, Microsoft

  • Clement Hecquet, Digimarc

  • David Springgay, Microsoft

  • Drummond Reed, Gen Digital

  • Eric Scouten, Adobe

  • Gavin Peacock, Adobe

  • Jesse Carter, CIRA

  • Lindsay Walker, Starling Labs

  • Loren Hart, Noosphere Technologies

  • Michael Becker, Identity Praxis

  • Nigel Earnshaw, BBC

  • Paul England, Microsoft

  • Peleus Uhley, Adobe

  • Pia Blumenthal, Adobe

  • Radu Ghiorghisor, Adobe

  • Will Kreth, HAND (Human & Digital) Identity

Agenda

5 min: Start meeting

  • Start recording

  • Welcome and community specification license reminder

  • Agenda review and call for agenda items

5 min: New members introduction

No new members today.

Endorsement assertion

🎥 0'50": Walk through PR #6: Substantial rewrite, introducing the terms endorser and endorsee, and clarifying the workflow for each role.

ACTION (✅): Eric to revise PR based on feedback in meeting. Now awaiting re-review from Charlie and Leonard.

ACTION (✅): Eric to split out suggestion on interoperability with identity assertion into new issue to be considered later. New issue #8 queued up for post-1.0 discussion.

15 min: Define named actor’s role

🎥 7'45": Walk through PR #98: Introduce an optional signer_payload.role field.

ACTION: Eric to review feedback in PR and update for re-review next week.

5 min: Discuss “multiple step processing” issue

🎥 24'01": Walk through issue #63: Possible interaction in “multiple step processing”. Close or discuss any needed action items.

ACTION: Eric to refer this to C2PA TWG and close the CAWG issue.

35 min: Discuss trust and threat model PR

🎥 28'36": Walk through PR #99: Define identity assertion trust model, which also includes formal descriptions of prior issue discussions on threat models.

ACTION: Eric to update PR based on discussion. (See comments in the PR.)

ACTION: Radu to discuss "Trust scenarios in identity assertion" with Adobe IMS team to see if 9.2.3 can be deleted.

5 min: Discuss overview section PR

🎥 1h08'05": Walk through PR #102: Clarify identity assertion “Overview” section.

ACTION (✅): Eric to merge PR after making suggestions from meeting.

15 min: Discuss security model PR

🎥 1h14'29": Walk through PR #96: Signer payload fixes.

Some key participants in the substance of this discussion are not able to join today’s meeting, so this will be a discussion, but not a resolution of this issue.

OUTCOME: Good discussion about the motivation for this PR. Will continue discussion in subsequent meeting. No action items.

5 min: Closing and review

Invitation to subsequent meetings, which will typically be on Mondays.