<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>
</p>
<p>Dear all, <br>
</p>
<p>Below is the DRAFT minutes received from RIPE. Thanks for
providing us the comments on the draft before 14/06/2020. The
plan is to publish the minutes on the website in two weeks period.<br>
</p>
---- **** -------
<p class="MsoNormal"><b><span
style="font-size:16.0pt;mso-ansi-language:
EN-US" lang="EN-US"></span></b></p>
<br>
<p class="MsoNormal"><b>1) Administrivia </b></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">This presentation is available here: </p>
<p class="MsoNormal"><a
href="https://ripe80.ripe.net/presentations/34-RIPE-80-IoT-WG.pdf">https://ripe80.ripe.net/presentations/34-RIPE-80-IoT-WG.pdf</a><span
style="mso-ansi-language:EN-US"> <span lang="EN-US"></span></span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">There were no changes to the agenda. </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The minutes from RIPE 79 were approved.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">It was noted that at RIPE 79, a group of
volunteers had
formed to <span style="mso-ansi-language:EN-US" lang="EN-US">develop</span>
on an
outline document on<span style="mso-ansi-language:EN-US"
lang="EN-US"> a </span>RIPE
scope for proactively mitigating IoT attacks. They were<span
style="mso-ansi-language:EN-US" lang="EN-US"> currently</span>
working on <span style="mso-ansi-language:EN-US" lang="EN-US">a</span>
draft <span style="mso-ansi-language:EN-US" lang="EN-US">and </span>would
share <span style="mso-ansi-language:EN-US" lang="EN-US">this</span>
on the mailing list. </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><b>2) WG co-chair appointment</b></p>
<p class="MsoNormal">Jim Reid </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The presentation is available <span
style="mso-ansi-language:EN-US" lang="EN-US">here</span>:</p>
<p class="MsoNormal"><a
href="https://ripe80.ripe.net/archives/video/367/">https://ripe80.ripe.net/archives/video/367/</a><span
style="mso-ansi-language:EN-US"> <span lang="EN-US"></span></span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US">Jim said
his term as WG co-chair was ending and t</span>here <span
style="mso-ansi-language:EN-US" lang="EN-US">were</span> two<span
style="mso-ansi-language:
EN-US"> <span lang="EN-US">excellent </span></span>candidates<span
style="mso-ansi-language:EN-US"> <span lang="EN-US">to replace
him.</span></span><span lang="EN-US"> </span><span
style="mso-ansi-language:EN-US" lang="EN-US">However, as
they had both received equal support, there was no clear
consensus</span> on
who should be chosen<span style="mso-ansi-language:EN-US"
lang="EN-US">.
According to the WG’s selection process, if consensus was not
able to be
reached, the RIPE Chair would make this decision. </span></p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US">Hans Petter
Holen, RIPE Chair, said he would review the mailing list and
announce his
decision in the closing plenary. </span></p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US">Jim thanked
both candidates for standing and said he was sure either of them
would do a
great job.</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Benedikt Stockebrand, Stepladder IT, suggested
the<span style="mso-ansi-language:EN-US" lang="EN-US">y</span><span
lang="EN-US"> </span><span style="mso-ansi-language:EN-US"
lang="EN-US">consider</span><span lang="EN-US"> </span><span
style="mso-ansi-language:EN-US" lang="EN-US">having</span><span
lang="EN-US"> </span><span style="mso-ansi-language:EN-US"
lang="EN-US">three c</span>hairs.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US">Jim said
the view of both Sandoche and himself was that the workload was
not enough to
justify this. However, if the WG wanted to have three chairs, it
could update
the selection process to allow for a third chair. </span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><b>3) RIPE NCC IoT Update </b></p>
<p class="MsoNormal">Marco Hogewoning, RIPE NCC</p>
<p class="MsoNormal"><br>
<span style="mso-ansi-language:EN-US" lang="EN-US">This
presentation is available
here: </span></p>
<p class="MsoNormal"><a
href="https://ripe80.ripe.net/presentations/23-RIPE80-IoT-WG_comms.pdf">https://ripe80.ripe.net/presentations/23-RIPE80-IoT-WG_comms.pdf</a><span
style="mso-ansi-language:EN-US"> <span lang="EN-US"></span></span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Luna, no affiliation, asked if one’s voice used
for Google
Assistant, Siri and Alexa <span style="mso-ansi-language:EN-US"
lang="EN-US">was</span>
searchable and <span style="mso-ansi-language:EN-US" lang="EN-US">whether</span><span
lang="EN-US"> </span><span style="mso-ansi-language:EN-US"
lang="EN-US">this</span>
would be considered Personal Identifying Information (PII) in the
future.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Marco <span style="mso-ansi-language:EN-US"
lang="EN-US">said</span><span lang="EN-US"> </span><span
style="mso-ansi-language:EN-US" lang="EN-US">this was</span>
still uncertain.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Jim added that <span style="mso-ansi-language:
EN-US" lang="EN-US">“</span>PII<span
style="mso-ansi-language:EN-US" lang="EN-US">”</span><span
lang="EN-US"> </span><span style="mso-ansi-language:EN-US"
lang="EN-US">was</span>
an American legal term<span style="mso-ansi-language:EN-US"
lang="EN-US">; </span>the
official term used in the European region <span
style="mso-ansi-language:
EN-US" lang="EN-US">was</span><span lang="EN-US"> </span><span
style="mso-ansi-language:
EN-US" lang="EN-US">“</span>Personal Data<span
style="mso-ansi-language:EN-US" lang="EN-US">”</span>.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Jim asked what<span style="mso-ansi-language:
EN-US" lang="EN-US"> had</span> been happening at the ITU
regarding IoT.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Marco Hogewoning <span
style="mso-ansi-language:
EN-US" lang="EN-US">said</span> there <span
style="mso-ansi-language:EN-US" lang="EN-US">were</span>
several topics under discussion<span
style="mso-ansi-language:EN-US" lang="EN-US">:</span><span
lang="EN-US"> </span><span style="mso-ansi-language:EN-US"
lang="EN-US">t</span>he
New<span style="mso-ansi-language:EN-US"> </span>IP proposal<span
style="mso-ansi-language:EN-US" lang="EN-US"> (</span>which
might have its own component in
IoT<span style="mso-ansi-language:EN-US" lang="EN-US">), </span>some
attempts <span style="mso-ansi-language:EN-US" lang="EN-US">at</span>
standardi<span style="mso-ansi-language:EN-US" lang="EN-US">s</span>ing
incident and accident reporting,
and some developments <span style="mso-ansi-language:EN-US"
lang="EN-US">in</span>
authorisation and authentication methodology based on blockchain.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><b>4) Preparing SMEs for IoT Security Standards
and
Regulation</b></p>
<p class="MsoNormal">Stacie Hoffman, Oxford Information Labs</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US">This
presentation is available here: <br>
</span><a
href="https://ripe80.ripe.net/presentations/44-RIPE80_Hoffmann.pdf"><span
style="mso-ansi-language:EN-US" lang="EN-US">https://ripe80.ripe.net/presentations/44-RIPE80_Hoffmann.pdf</span></a><span
style="mso-ansi-language:EN-US" lang="EN-US"> </span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Paul Rendek, <span
style="mso-ansi-language:EN-US" lang="EN-US">DSTREAM
GROUP</span>, asked how <span style="mso-ansi-language:EN-US"
lang="EN-US">they</span><span lang="EN-US"> </span><span
style="mso-ansi-language:EN-US" lang="EN-US">were</span>
planning to reach out to <span style="mso-ansi-language:EN-US"
lang="EN-US">s</span>mall
and <span style="mso-ansi-language:EN-US" lang="EN-US">m</span>edium
<span style="mso-ansi-language:EN-US" lang="EN-US">e</span>nterprises<span
style="mso-ansi-language:EN-US" lang="EN-US">. </span></p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US"> </span></p>
<p class="MsoNormal">Stacie said <span
style="mso-ansi-language:EN-US" lang="EN-US">they
would</span> carry out a marketing campaign<span
style="mso-ansi-language:
EN-US" lang="EN-US"> and they were</span> working with a company
<span style="mso-ansi-language:EN-US" lang="EN-US">to build a
strategy for this</span>. <span style="mso-ansi-language:EN-US"
lang="EN-US">T</span>hey<span style="mso-ansi-language:EN-US"
lang="EN-US"> we</span>re<span style="mso-ansi-language:
EN-US" lang="EN-US"> also</span> using their own network of
contacts in the IoT Security
Foundation and innovation centers.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Stacie <span style="mso-ansi-language:EN-US"
lang="EN-US">said
if anyone in</span> the audience <span
style="mso-ansi-language:
EN-US" lang="EN-US">knew</span><span lang="EN-US"> </span><span
style="mso-ansi-language:
EN-US" lang="EN-US">of</span> networks that would <span
style="mso-ansi-language:
EN-US" lang="EN-US">like </span>to contribute, they would be
open to <span style="mso-ansi-language:EN-US" lang="EN-US">this.
</span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Blake Willis, iBrowse, asked if they <span
style="mso-ansi-language:EN-US" lang="EN-US">were</span>
planning to use conformity logos
and stamps.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Stacie replied that they <span
style="mso-ansi-language:
EN-US" lang="EN-US">were</span> not working on this <span
style="mso-ansi-language:
EN-US" lang="EN-US">specifically</span>, but there <span
style="mso-ansi-language:
EN-US" lang="EN-US">was</span> another workstream that<span
style="mso-ansi-language:
EN-US" lang="EN-US"> was</span> developing an IoT security
compliance framework.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Paul asked if links to this <span
style="mso-ansi-language:EN-US" lang="EN-US">material </span>could
be sen<span style="mso-ansi-language:EN-US" lang="EN-US">t</span>
to<span style="mso-ansi-language:
EN-US" lang="EN-US"> the</span> IoT Working Group <span
style="mso-ansi-language:
EN-US" lang="EN-US">when it was available. </span></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Paul Steinhäuser<span style="mso-ansi-language:
EN-US" lang="EN-US">, </span>embeDD GmbH<span
style="mso-ansi-language:EN-US" lang="EN-US">,</span>
asked how the vulnerability information<span
style="mso-ansi-language:
EN-US" lang="EN-US"> would</span> be used.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Stacie <span style="mso-ansi-language:EN-US"
lang="EN-US">said</span>
the platform <span style="mso-ansi-language:EN-US" lang="EN-US">was</span>
meant
to be a way to report <span style="mso-ansi-language:EN-US"
lang="EN-US">vulnerabilities</span>
to a company and for the company to communicate with the reporter<span
style="mso-ansi-language:EN-US" lang="EN-US"> to solve it</span>.
<span style="mso-ansi-language:EN-US" lang="EN-US">For now, t</span>here
<span style="mso-ansi-language:EN-US" lang="EN-US">were</span> no
plans to use <span style="mso-ansi-language:EN-US" lang="EN-US">this</span>
information <span style="mso-ansi-language:EN-US" lang="EN-US">beyond</span>
the platform.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><b>5) AOB </b></p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">There <span style="mso-ansi-language:EN-US"
lang="EN-US">were</span>
no AOB<span style="mso-ansi-language:EN-US" lang="EN-US">s</span>.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="mso-ansi-language:EN-US"
lang="EN-US">End of
session. </span></p>
<p>
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;
mso-font-charset:0;
mso-generic-font-family:roman;
mso-font-pitch:variable;
mso-font-signature:-536870145 1107305727 0 0 415 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-style-unhide:no;
mso-style-qformat:yes;
mso-style-parent:"";
margin:0cm;
margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:12.0pt;
font-family:"Times New Roman",serif;
mso-fareast-font-family:"Times New Roman";
mso-ansi-language:#1000;
mso-fareast-language:EN-GB;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;
text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-noshow:yes;
mso-style-priority:99;
color:#954F72;
mso-themecolor:followedhyperlink;
text-decoration:underline;
text-underline:single;}
.MsoChpDefault
{mso-style-type:export-only;
mso-default-props:yes;
font-family:"Calibri",sans-serif;
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:Calibri;
mso-fareast-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-ansi-language:#1000;}size:595.0pt 842.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;
mso-header-margin:35.4pt;
mso-footer-margin:35.4pt;
mso-paper-source:0;}
div.WordSection1
{page:WordSection1;}</style></p>
</body>
</html>