sharedsignals
sharedsignals copied to clipboard
CAEP Assurance Level needs more options and detail
In the CAEP Assurance Level Change SET, it refers to NIST SP800-63R3.
In other countries like EU and New Zealand, Assurance Level definition is different that of NIST.
SP800 is a guideline and not a technical spec. Since so many of us are implementing Passkey, don’t you want a more technical specific regarding assurance level.
Upon receiving Assurance level change SET, what is the recommended actions by RP?