Wiki

Clone wiki

fapi / FAPI_Meeting_Notes_2018-10-10_Atlantic

FAPI WG Meeting Notes (2018-10-10)

Date & Time: 2018-09-26 14:00 UTC

Location: GoToMeeting https://global.gotomeeting.com/join/321819862

The meeting was called to order at 14:04 UTC.

1.   Roll Call

  • Attending:
    • Nat Sakimura,
    • Bjorn Hjelm,
    • Brian Campbell,
    • Daniel Fett,
    • Joseph Heenan,
    • Freddi Gyara,
    • Chris Michael,
    • Ralph Bragg
    • Barry ODonohue,
    • Dave Tonge
  • Guests:
  • Regrets:

2.   Adoption of the Agenda (Nat)

  • Adopted, adding Pull reqeusts to the topic.

3.   Implementer's Draft Voting (Nat)

  • Voting has started. Right now, there are 27 votes recorded.
  • Quaram is 56 so we need 29 more ovtes.
  • Members are encouraged to ask people around to vote.

4.   CIBA Progress Report (Brian/Dave)

  • Number of issues.
  • Splitting of the draft is underway. Hopefully, soonish. (Plan to do it by next Tuesday)
  • Outstanding work needs to be done around subject identification in login token hint.
    • secevent - conceptually same to structured identifier.

6.   External Organizations

6.1.   Open Banking UK (Ralph)

  • CMA 9 banks are building against v.3 of the spec, which is enabling PSD2 compliance.
  • Putting together detailed proposition on standards to be developed, including the OpenID, funtional APIs, test harness.
  • In parallel, talking with other markets, e.g., Australia, Ireland,

European Banks, South Africa (Regulatory mandate),

6.2.   Australia (Ralph)

  • Security profile: Security WG has not yet been formed. The position paper was published, FAPI Read.
  • How to construct consent model. Scope access to resources with a configurable period of time.
  • Identity is mandated by Open Banking ACCC initiative. Banks need to provide via resource.
  • Comments sought at https://github.com/ConsumerDataStandardsAustralia/standards/issues/26
    • Decision 23 and 26 is particulary of interest.

6.3.   Security Profile Comparison (Dave)

  • No progress for now, as CIBA is a priority.

6.4.   European Commission (Nat)

  • Oct. 28 - 1 day workshop. Vendor presentations for KYC and Identity proofing.
  • OIDF made a presentation about OIDC and FAPI. Some interest from EC on the situation with Berlin Group. Nat will follow up.

7.   Issues (Nat)

8.   Pull Requrests

Note: As a general guideline, during the implementer's voting period, only the editorial or previously agreed item that were mis-represented in the draft can be applied.

PR #77 was mereged.

9.   AOB

9.1.   Events

  • ISO/TC68/SC9 Singapore meeting coming up: Dave will send the dates to the list.
  • ISO/TC307 (Privacy by design for consumer goods) London meeting on Nov.1,2. Perhaps beer-bof or something can be planned.

9.2.   Next Call

Next Pacific call will go as scheduled.

  • The meeting was adjourned at 14:57 UTC.

Updated