Bob,
Three comments on the project plan: 2 specific, 1 general.
First, on slide 3, I would suggest that sub-bullet 1 (on bullet 3) should read:
"service providers
an economical and consumer-friendly method to know who they are dealing with ..."
I emphasize this because service providers are trying to balance security against both the cost of any solution and the potential for turning off customers if the process is cumbersome or intrusive. That is why credit card issuers are currently accepting a certain level of losses rather than raising authentication requirements.
Second, I am concerned that the project plan doesn't identify potential sources of funding. There seems to be an implicit assumption that once we approve the plan, funding will materialize. But I think that obtaining funding for such a generic plan is likely to be as challenging as solving the problem. Who would be targeted for funding? Who would approach these targets? What is the value proposition for them? Would soliciting contributions require more manpower than doing the work?
Third, I view the project plan more as a charter than a project plan. It seems to be awfully broad. It tackles a difficult problem that others have been working on for some time without obvious success. I am not sure what is unique about a CIWG-driven attempt to solve this problem versus the work of others that would provide a compelling value to a funding organization. I fear that we could approve the plan as is and fritter away valuable energy trying to drum up funding without success. I don't see the business proposition. Perhaps we need to add a slide, "Why CIWG? Why now?".
Jeff
--
Jeff Stollman
stoll...@gmail.com1 202.683.8699