Re: Comment for Web Payments IG Charter

I support the charter element 2.4 Identity, Authentication, and Security.

I see this a critical component of web payments charter.  Yes, is not an
obvious component, but how is one to accept a payment from another party
without having a standard framework for providing a proof of their
identity?  There are many identity solutions in play today, but most are
closed or based on a centralized mechanism, which only benefits those
providers. Furthermore, only institutions that have a high-degree of
technical and financial resources would be in a position to develop and
deliver identity solutions based on the proposed specifications by these
large providers.  To my knowledge there is no "neutral" outside interest
group that is addressing the identity issue that is decentralized, uses an
extensible data model (JSON-LD) and a secure message system that is simple
to implement.  This only results in limited choices for internet users.
 Leaving this component out of the Charter in my view will only prolong the
initiative, because without well defined methods for establishing and
validating identity with credentials that are trustworthy, how can web
payments be trusted?

By way of example, an initiative that views web identity linked to
verifiable credentials for the purpose of web-based financial applications
see http://www.diacc.ca/about-us/.  You'll see that DIACC is taking on the
initiative to establish Digital ID and Authentication a result of the
Canadian government’s Task Force for the Payments System Review.

Eric
----------------------------------
Eric Korb, President/CEO - accreditrust.com

Received on Tuesday, 3 June 2014 21:26:42 UTC