From d9f57a23a9c6cd7de6ee39f68304e8be7d9dc116 Mon Sep 17 00:00:00 2001 From: Jim Fenton Date: Fri, 1 May 2020 16:26:45 -0700 Subject: [PATCH] Improve readability of HTML Co-authored-by: Justin Richer --- sp800-63a/sec4_ial.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/sp800-63a/sec4_ial.md b/sp800-63a/sec4_ial.md index e86f1994..43bfc258 100644 --- a/sp800-63a/sec4_ial.md +++ b/sp800-63a/sec4_ial.md @@ -161,7 +161,8 @@ The CSP SHALL support in-person or remote identity proofing. The CSP SHOULD offe
  • The CSP SHOULD send a notification of proofing to a confirmed address of record.
  • The CSP MAY provide an enrollment code directly to the subscriber if binding to an authenticator will occur at a later time.
  • The enrollment code SHALL be valid for a maximum of 7 days.
    • - + +
  • If the CSP performs remote proofing (unsupervised):
    1. The CSP SHALL send an enrollment code to a confirmed address of record for the applicant.
      2. @@ -174,7 +175,8 @@ The CSP SHALL support in-person or remote identity proofing. The CSP SHOULD offe
    2. 30 days, when sent to a postal address of record outside the contiguous United States;
    3. 10 minutes, when sent to a telephone of record (SMS or voice);
    4. 24 hours, when sent to an email address of record.
      5. -
    + +
  • The CSP SHALL ensure the enrollment code and notification of proofing are sent to different addresses of record. For example, if the CSP sends an enrollment code to a phone number validated in records, a proofing notification will be sent to the postal address validated in records or obtained from validated and verified evidence, such as a driver's license.