Can you meet with the Linux Foundation OpenSSF Digital Identity Attestation Working Group?

[david-a-wheeler]

Hi, welcome to the Linux Foundation!

Would some folks from the Janssen project be willing to present & talk with the Open Source Security Foundation (OpenSSF) Digital Identity Attestation Working Group (WG)?

We just met December 9. We're scheduled for December 23 but I think that will be cancelled. Our next meeting (after that) is January 6, 2021, at noon Eastern Time. I think it'd be good to talk; I suspect there are many ways we could work together. At the least, we'd like to hear a summary about what you're doing.

You can see the WG notes.

[nynymike]

I'd be happy to join the call on Jan 6. To build trust, you need both "tools and rules". Any authentication/authorization system (like Janssen auth-server) is only useful after identity proofing has taken place, and credentials are securely delivered to the right person. In this sense, Janssen is a tool, but maybe not a tool that will help you with your core challenge, which sounds like it is "identity proofing". While Janssen auth-server might not help, I'm happy to share how we identity proof developers, and the range of solutions I've seen at some of the organizations I've worked with over the past 20 years or so.

[david-a-wheeler]

Excellent! The WG page has the details. You can also email me dwheeler AT linuxfoundation DOT org. We're looking forward to it. I'd suggest ~10-15 minute presentation + Q&A time, that should at least enable a discussion. We normally record our meetings so others can watch later, let us know if that's a problem.

[david-a-wheeler]

@nynymike - Mike, are you still planning to present to us Jan 6 (tomorrow)?

[nynymike]

Yes, I have it on my schedule for 11am US Central time on Google Hangouts.