REFEDS Assurance wg telco
Friday 23 March 2018 at 14:30 CET/8:30 CDT
CERN’s Vidyo portal: https://www.nikhef.nl/grid/video/?m=rawg

Alan B
Eskil S
Jule Z
Pål A
Mikael L

Notes

- new SFA profile format: https://docs.google.com/document/d/1ZjpzyYWZhqjbTeIzxX9Vug9Whqb9YEkK29e1FBjL5VM/edit#

  • participantes liked the new format better
  • SFA is better than base which has already a meaning in InCommon
  • discussion if “more secure” SFA will be needed later – no clear consensus
  • section 4 first table
    • asterisk not explained in table header
    • memorized secrets. 62-71 –> 10 characters. Add example characterset pool (a-z and A-Z etc). Refrain from imposing character complexity requirements
    • lifetime of the secrets in row 2 is not made explicit. Does an item in row 2 assume the secret is locked after a single wrong entry?
    • does row 2 really exist as a single authentication factor?
    • 2048 bit length for asymmetric keys
    • check the length of ECC key
  • section 4, replacement of lost factor
    • replacement or recovery? Replacement works better.
    • there must be a way to get a new password

-next call on Wednesday 4th April at 1500 CEST


  • No labels