Re: [saag] Interest COVID-19 'passport' standardization?

Hi All,

Standardization of specific disease Electronic Medical Record (EMR) secure
clearinghouses is Out of Scope for the IETF. Vendors must be at liberty to
develop their own method if required by their sponsor or government and if
a solution becomes adopted which uses open source, then widely accepted by
other vendors /and/ is utilizing a non-standard method which proves
successful, then and only then should that Method should be discussed as
allocating a standard for the method, never the specific disease. We would
need more than one use case (more than COVID-19 vaccination EMR) to have a
balanced discussion about what's working and what's not. We should not be
steering into conversations about what policy companies and governments
should be allowed to make as it is not an Engineering topic.

I am interested in EMR in general, but as I'm actively working in this
space, I suggest we focus on broader security applications. When I look at
my alerts from USCERT a larger issue affecting the entire Enterprise
infrastructure is phishing and zero day issues. I'd rather see more
examination on what existing standards are in need of review given the
current rate of penetration.

With Regard,

Kronah Wood, CPhT
Metapolymath, LLC
PO Box 19236
Lenexa, KS 66219-9236
+1.2139158297

Sent from Mobile

On Sat, Jul 31, 2021, 10:43 AM Stephen Farrell <stephen.farrell@cs.tcd.ie>
wrote:

>
>
> On 31/07/2021 16:17, Carsten Bormann wrote:
> > I don’t understand why the fact that governments buy inane
> > applications (*) should prevent us from thinking about this space.
> Nor would I. Luckily that wasn't my argument.
>
> For international travel: we're not needed.
>
> WRT feature creep: we shouldn't help.
>
> For those reasons, IMO the IETF shouldn't touch this topic
> with a barge-pole.
>
> WRT incompetent implementation: it's slightly useful to name
> and shame.
>
> S.
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag
>