Phase II IDEF Registry: Difference between revisions

From IDESG Wiki
Jump to navigation Jump to search
m (34 revisions imported: Initial Upload of old pages from IDESG Wiki)
 
No edit summary
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
Project details for Phase II should go here.. more to come.
Project details for Phase II were tracked here.
 
[[Phase III IDEF Registry]] takes up where this phase ended.


[[Phase II priority list]]
[[Phase II priority list]]
Line 17: Line 19:
* [[File%3ANoreen-UX_Guidelines-w_Requirements.pdf]]
* [[File%3ANoreen-UX_Guidelines-w_Requirements.pdf]]


===Open Issues===
==Open Issues==


   
   
Line 32: Line 34:
# There is no advice available for entities that do not normally interact with the user on recovery and redress
# There is no advice available for entities that do not normally interact with the user on recovery and redress
# No standard has been found that helps to describe how a site with no user connectivity can meet any privacy or security guideline.
# No standard has been found that helps to describe how a site with no user connectivity can meet any privacy or security guideline.
==References==
[[Category:Profile]]

Latest revision as of 18:45, 7 January 2019

Project details for Phase II were tracked here.

Phase III IDEF Registry takes up where this phase ended.

Phase II priority list

Requirements Documents for Phase II

Archive of Files provided by Noreen

Open Issues

after discussions with the team here are a few more thoughts:

  1. There will be multiple identifier frameworks which have their own set of identity requirements.
  2. Some of the frameworks will be IDEF compliant.
  3. All IDESG compliant frameworks will provide a machine-readable method to determine if a web site is a member of the framework
  4. Especially at the start most frameworks will not be IDEF compliant.
  5. How should an IDEF compliant entity deal with identifiers that are:
    1. from within their own framework, ie within Healthcare or within the education internet 2 framework,
    2. from an external framework that is still IDEF compliant, ie a student being transfer from a school client to the healthcare hospital or from a VA hospital with a PIV card to a public hospital that cannot read it
    3. from an external framework is is not IDEF compliant, ie from a social network site like Google, FB, Microsoft, etc.
  6. There is no advice available for entities that do not normally interact with the user on recovery and redress
  7. No standard has been found that helps to describe how a site with no user connectivity can meet any privacy or security guideline.

References