2023-01-16 Scope

This meeting was scheduled to determine the scope of the challenge and to make sure it was covered from multiple angles. 4 different vendors attended the meeting.

Resources

Video available @ youtube

Presentation available

Conclusion

The following points were concluded from the meeting:

• An authorization must be usable by any node/app from the organization which is authorized.
• Any node/app of an organization must accept this authorization
• Authorizations must only be issued to nodes that support the use-case
• Nodes/apps that issue authorizations must be authorized by the organization to do so for a use-case
• Authorizations must be automatically issued/revoked/sent when the topology changes (new nodes, nodes removed)
• The trust between the authorization issuer and authorization verifier within an organization requires extra care

Addtional notes

Currently the Nictiz qualification process can only qualify a pair of vendors/applications where each party covers the entire side of a use-case. Eg 1 side covers sending and the other receiving. It was concluded that to support multiple vendors properly, a combination of vendors at one side must be able to qualify as well.