Re: [legalxml-enotary] OASIS talk at Summer NASS Meeting

[Arshad Noor <arshad.noor@strongauth.com>]

In all honesty, Mark, its too early to tell where the proponents
for ENML will come from.  Clearly the Notary Administrators, the
NNA, the Mortgage Banking and Property Recording industries are
beneficiaries.

But the recent brouhaha over the *confirmed* attack on MD5 in
digital certificates and a second simultaneous attack on a CA that
issued a wrong SSL digital certificate to the registrant, got me
thinking about how to solve the problem of e-commerce trust.  In
the recesses of my mind, I have an idea that a new protocol, in
combination with ENML, could play a significant role for solving
the SSL trust issue.  ENML would be critical to that solution, but
I need to write a paper on this and submit it to a security
conference for vetting, before I develop on this theme in non-
security circles.  So, I'll come back to this later in the year.

But, my point is, presenting ENML and its benefits to security
people may allow them to think of new ways of solving problems
that we did not imagine in the TC.  New protocols need to cast
their net wide.  As these random seeds take root, a new ecosystem
develops around the protocol.

This will take time - perhaps 2-3 years; since RSA - and the ABA
Tech Show - are around the corner, it doesn't hurt to start the
dissemination of information on ENML and get people's minds
working on the issue.  I've had people join EKMI 9 months after
they've heard me at a conference (PayPal just did last month even
though he heard me last March).

Arshad

Mark Ladd wrote:
> Arshad,
> 
> I like the "bigness" of your thinking - however - I'm wondering if RSA is
> really the right target audience for eNotary.  Maybe it will be someday, but
> it seems to me that our most critical audience right now are the Notary
> Administrators (who set the rules for notary) and the real estate finance
> folks (who are the largest "consumers" of notary in the US).  If these two
> groups don't embrace ENML, then I'm not sure that RSA helps us much.
> 
> I'd be interested in what other TC members think about this.  Also, if you
> (or anyone else on the TC) can help me to better connect the dots between
> eNotary and RSA, that might help too.
> 
> I'm not opposed - I'm just not seeing the connection yet.
> 
> 
> Mark Ladd
> PRIA Consultant
>  
> 262-498-0850
> mladd@pria.us 
>  
>  
> 
> -----Original Message-----
> From: Arshad Noor [mailto:arshad.noor@strongauth.com] 
> Sent: Wednesday, January 21, 2009 8:56 PM
> To: Marc L. Aronson
> Cc: legalxml-enotary; laurent liscia; Carol Geyer; Dee Schur
> Subject: Re: [legalxml-enotary] OASIS talk at Summer NASS Meeting
> 
> Thanks, Marc.  I'll wait to hear back from you when NPA
> confirms; the sooner I know the better so I can block it
> out on my calendar.  I've just confirmed speaking at the
> CTST (Card Technology/Security Technology) show in the
> first week of May in New Orleans.
> 
> (You may want to modify the description of OASIS to say that
> it is an "international (non-profit) standards development
> organization (like IEEE, ANSI or the ISO)".  OASIS does not
> create any technology - just standards that are implemented
> by technology vendors.)
> 
> All, here's what I found out from RSA:
> 
> 1) Their minimum booth size is 10x10 at a cost of $6,750;
> 2) They do not provide a discount to SDO's;
> 
> I don't think its worth it for a single TC to spend that kind
> of money on a booth.  However, I have a suggestion that might
> benefit eNotary TC, the EKMI TC and OASIS:
> 
> - In the EKMI TC, we had about $1,500 left over from the 2008
>    budget; I've requested $500 from the IDtrust SC for a face-
>    to-face TC meeting during RSA.  Assuming this gets approved,
>    we'll have about $1K left-over;
> - If EKMI TC chips-in this $1K, if eNotary TC chips-in $2K and
>    perhaps, if OASIS itself puts in $4K, we could get the booth
>    and promote ENML, SKSML (EKMI TC's new protocol) and general
>    OASIS membership in the booth;
> - We can hand out a couple of white-papers on ENML - one that
>    I expect to write up for the ABA SciTech Journal, and the
>    Security Implications paper - and put up a rolling ENML
>    presentation (which I plan to create for our repository
>    before we go out for Public Review) on a PC in the booth.
> - If anyone from eNotary TC (besides myself) is attending RSA,
>    they could volunteer to man the booth for a couple of hours
>    to talk about ENML and eNotary TC;
> - An OASIS representative (assuming someone attends) could then
>    talk about general OASIS membership; and
> - I will be there to talk about ENML and SKSML for at least 2
>    of the 3 three days the booth is available.
> 
> Aside from a couple of laptops for the SKSML and ENML
> presentations, we only need a couple of posters on ENML & SKSML
> (under $100 each from Kinko's) and the OASIS banner (which they
> already have).
> 
> All in all, this might give all of us some bang for part of the
> buck.  If OASIS does not, or cannot, chip-in the $4K, we could
> ask a few more TC's if they want to participate?  ECF?  Dee (who
> is copied on the e-mail) could ask a couple of the security TC's
> if they'd like to participate.  If we got 3-4 TC's, then we
> could all do it for $1K-$2K each (with volunteer support from
> each TC).
> 
> What do you all think?
> 
> Arshad
> 
> 
> Marc L. Aronson wrote:
>> Arshad:
>>
>> Here is part of an email I wrote NASS about you being a speaker at 
>> NASS-NPA this summer. Below you will find their answer.
>>
>> I have also written the NPA directly, but have not received a response 
>> as of this time and date.
>>
>> Marc A.
>>
>> *My question:*
>>
>> I belong to a committee that wants to have a speaker at the NPA part of 
>> the Summer NASS meeting. I assume that anyone can come in and speak to 
>> the NPA section without any problem or fee as long as the NPA approves. 
>> This person/committee might want to set up a vendor booth (the 
>> organization is OASIS, a world wide technology organization). While you 
>> may not have determined your vendor fees for this summer yet, may I 
>> please have an example of what they are for this winter’s conference; 
>> that will be close enough for planning purposes.
>>
>> *Their answer:*
>>
>> If NPA invites you to speak this summer, that is the only approval you 
>> need.  If you intend to stay for any of the conference beyond your day 
>> of the presentation, you would need to register.  Registration fees for 
>> the summer conference will probably be around $900 for a corporate 
>> non-member (a business entity that is not a corporate affiliate of 
>> NASS).  Exhibit booths at the summer conference usually run about $500.
>>
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
>