attachment-0001
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:133572902;
mso-list-template-ids:-2057291536;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Brian / Smith –<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">I’d like to put Brian’s suggestion (especially #2) as a topic for a future PWG SC Meeting. If my memory is correct the next SC Meeting is scheduled for Sept 8<sup>th</sup>
but I will be on vacation that day. Can we put this on the agenda for the following SC Meeting which I guess would be Sep 22<sup>nd</sup>?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Alan<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"> Brian Smithson [mailto:bsmithson@ricohsv.com]
<br>
<b>Sent:</b> Tuesday, August 30, 2016 2:28 PM<br>
<b>To:</b> Ira McDonald <blueroofmusic@gmail.com>; Sukert, Alan <Alan.Sukert@xerox.com><br>
<b>Cc:</b> ids@pwg.org; Kennedy, Smith (Wireless Architect) <smith.kennedy@hp.com>; Michael Sweet (msweet@apple.com) (msweet@apple.com) <msweet@apple.com><br>
<b>Subject:</b> Re: [IDS] 08/24/16 F2F Meeting Minutes<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Hi Ira,<o:p></o:p></p>
<p>The problem isn't copyright (as it was with IEEE-SA and the 2600.n series). The problem is recognition of the PP. NIAP and Japan recognize HCD PP v1.0, and sort of by proxy the other four eyes and maybe Germany, Sweden, and others, might go along with it.
But Korea has a problem with it because it is too FIPS-validation-specific and doesn't accommodate other national crypto algos and validation processes. 2600.1/2600.2 require data protection that pretty much can only be satisfied by crypto, but doesn't specify
method or testing, so Korea can apply it using their national standards.<o:p></o:p></p>
<p>Unfortunately, publishing HCD PP v1.0 as a PWG standard won't help Korea, and I don't think it would go very far to make it seem more "international".
<o:p></o:p></p>
<p>Publishing an HCD PP v1.1 to allow Korean and other crypto standards as an optional addition to the FIPSy requirements isn't a bad idea, but I'm pretty sure that NIAP wouldn't recognize it because they don't recognize the other standard's assurance activities
(or maybe even the algos). Korea would still need to conform to two PPs (v1.0 for NIAP, v1.1 for ITSCC) but at least they'd be closer cousins. It would just be for Korea, and honestly, it would be better if ITSCC and Samsung got together and did it without
the PWG.<o:p></o:p></p>
<p class="MsoNormal">I'd still like to keep exploring how the PWG and the IDS group can have a role in PP development and maintenance. I think of two levels of participation:<o:p></o:p></p>
<ol start="1" type="1">
<li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
Just the IDS group, for mostly ad hoc purposes, mostly of concern to vendors (not the broader CC community of labs, consultants, nations, etc.). We've been doing this already, but there may be more specific or proactive ways we could do it in the future. I
don't have any particular ideas, but it just seems like it could be useful. It could include publication of PWG documents related to the PP. Whitepapers? Amicus briefs? :-)<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1">
The PWG and IDS group could get more deeply involved if it hosted an interpretations and maintenance function for the HCD PP, or even further if the PWG hosted the MFP Technical Community. Presently, the interpretations and maintenance function is performed
by NIAP's TRRT, and the MFP TC is hosted by the CCUF on OnlyOffice. But you never know. I bring this up because to properly serve either of those functions, the PWG would need to accommodate non-vendor participants on a fairly equal footing, and those participants
probably wouldn't want to (or be able to) pay a membership fee. I know that "anyone can participate", but in this case the freebies would fully participate in decision-making on PP (not PWG) issues.<o:p></o:p></li></ol>
<p>Level 2 is a big can of worms, as is PP production. But I think we should consider some kind of ongoing participation at level 1, at least as a convenient F2F meetup but better yet as an industry voice.<o:p></o:p></p>
<p>- Brian<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 8/30/2016 10:25 AM, Ira McDonald wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Hi Alan,<o:p></o:p></p>
</div>
<p class="MsoNormal">Reading the HCD PP slides and the IDS F2F minutes, I encountered<o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">the idea of the PWG adopting and publishing the HCD PP v1.<o:p></o:p></p>
</div>
<p class="MsoNormal">Although I can find no claim of copyright in the actual HCD PP, I guess<o:p></o:p></p>
</div>
<p class="MsoNormal">that NIAP and IPA claim the copyright. If so, the PWG can't consider<o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">standardizing this document.<o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Brian and Alan - do you know the copyright status?<o:p></o:p></p>
</div>
<p class="MsoNormal">Cheers,<o:p></o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">- Ira<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br clear="all">
<o:p></o:p></p>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Ira McDonald (Musician / Software Architect)<br>
Co-Chair - TCG Trusted Mobility Solutions WG<br>
Chair - Linux Foundation Open Printing WG<br>
Secretary - IEEE-ISTO Printer Working Group<br>
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG<br>
IETF Designated Expert - IPP & Printer MIB<br>
Blue Roof Music / High North Inc<br>
<a href="http://sites.google.com/site/blueroofmusic" target="_blank"><span style="color:#3333FF">http://sites.google.com/site/blueroofmusic</span></a><br>
<a href="http://sites.google.com/site/highnorthinc" target="_blank"><span style="color:#6600CC">http://sites.google.com/site/highnorthinc</span></a><br>
mailto: <a href="mailto:blueroofmusic@gmail.com" target="_blank">blueroofmusic@gmail.com</a><br>
Jan-April: 579 Park Place Saline, MI 48176 734-944-0094<br>
May-Dec: PO Box 221 Grand Marais, MI 49839 906-494-2434<o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Mon, Aug 29, 2016 at 11:19 AM, Sukert, Alan <<a href="mailto:Alan.Sukert@xerox.com" target="_blank">Alan.Sukert@xerox.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D">Updated the Subject Line to the correct date</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#1F497D"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b>From:</b> Sukert, Alan
<br>
<b>Sent:</b> Monday, August 29, 2016 11:19 AM<br>
<b>To:</b> '<a href="mailto:ids@pwg.org" target="_blank">ids@pwg.org</a>' <<a href="mailto:ids@pwg.org" target="_blank">ids@pwg.org</a>><br>
<b>Cc:</b> 'Kennedy, Smith (Wireless Architect)' <<a href="mailto:smith.kennedy@hp.com" target="_blank">smith.kennedy@hp.com</a>>; Ira McDonald (<a href="mailto:blueroofmusic@gmail.com" target="_blank">blueroofmusic@gmail.com</a>) <<a href="mailto:blueroofmusic@gmail.com" target="_blank">blueroofmusic@gmail.com</a>>;
Michael Sweet (<a href="mailto:msweet@apple.com" target="_blank">msweet@apple.com</a>) (<a href="mailto:msweet@apple.com" target="_blank">msweet@apple.com</a>) <<a href="mailto:msweet@apple.com" target="_blank">msweet@apple.com</a>>; Brian Smithson <<a href="mailto:bsmithson@ricohsv.com" target="_blank">bsmithson@ricohsv.com</a>><br>
<b>Subject:</b> [IDS] 11/03/15 F2F Meeting Minutes<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The minutes from the August 24, 2016 PWG IDS Face-to-Face Meeting have been posted on the PWG IDS FTP site and are available at
<a href="ftp://ftp.pwg.org/pub/pwg/ids/minutes/ids-f2f-minutes-20160824.pdf" target="_blank">
ftp://ftp.pwg.org/pub/pwg/ids/minutes/ids-f2f-minutes-20160824.pdf</a>. Unfortunately I don’t have the email addresses to many of the attendees at the meeting, so if you can forward this note to the appropriate persons that would be very helpful.<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Alan Sukert</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Product Security Specialist</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Xerox Global Technology Delivery Group Strategy, Quality and Customer Experience</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#00B050">Xerox Certified Green Belt</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif"><a href="mailto:Alan.Sukert@xerox.com%7C" target="_blank">Alan.Sukert@xerox.com|</a> tel
<a href="tel:585.427.1413" target="_blank">585.427.1413</a> or 8*707-1413</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">MS 0111-03A | 800 Phillips Road | Webster, NY 14580</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">“The right angle from which to approach a problem is a try-angle”<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</blockquote>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>Regards,<o:p></o:p></pre>
<pre>Brian Smithson<o:p></o:p></pre>
<pre>CISSP, CISA, PMP, CSM<o:p></o:p></pre>
<pre>Senior Security Architect<o:p></o:p></pre>
<pre>Global Solutions Engineering<o:p></o:p></pre>
<pre>Solutions Development Center<o:p></o:p></pre>
<pre>Ricoh Americas<o:p></o:p></pre>
<pre>675 Campbell Technology Pkwy., Suite 200, Campbell CA, 95008<o:p></o:p></pre>
<pre>(408)610-3113<o:p></o:p></pre>
</div>
</body>
</html>