This is a bit old news, but I participated remotely as a committee member in the first meeting of the Digital Agency's "Expert Meeting on Attribute Certification Issues," held on October 23rd. It was the autumn tour season, so... However, perhaps due to Microsoft Teams or the microphone, I could only hear about two-thirds of what was being said, and I couldn't hear what was going on behind the scenes...
Further display Digital Agency: First Expert Meeting on Attribute Certification Issues
SP 800-63-4B, published by the National Institute of Standards and Technology (NIST), provides the latest guidelines on password security, and includes content that overturns conventional wisdom (which has long been accepted as common knowledge among experts). This article provides an easy-to-understand explanation of the core points of this important document for those in charge of password-based user authentication systems within companies, as well as those responsible for setting such policies and managers.
Further display NIST SP 800-63B-4: Understanding the New Password Security Standard (with significant updates on November 7th)
The OpenID Foundation, which sets international standards for digital identity, has announced that it will launch a new authentication service in the second quarter of 2026! This is a groundbreaking service that strengthens collaboration with management organizations and certification testing bodies in addition to its current self-certification service (which already has over 4,000 successful cases).
Further display [Breaking News] The future of digital IDs is changing! OpenID Foundation responds to regulations and market competition with third-party authentication services!
As we reported in X, on September 26th, the UK government announced plans to introduce digital IDs through the "GOV.UK Digital Wallet." This has sparked a major debate in the digital society, with calls for efficiency clashing with concerns about privacy violations. Of particular note is...
Further display Surveillance or efficiency? UK's "mandatory digital ID wallet" policy undergoes a major transformation ~ Over 160 million signatures against it overnight (Parliamentary petition)
First of all, I think this is a very well-written draft report. I would like to express my respect to the secretariat and the committee members. I have only made the following two points: (3) Trends in international organizations (relevant section) ② Following ITU-T (opinion) In the section on ITU-T, it also mentions ISO...
Further display We have sent a letter of opinion in response to the Ministry of Internal Affairs and Communications' public comment request for the 2025 (draft) report of the Study Group on the Realization of a Safe and Secure Metaverse.
The US OpenID Foundation has submitted the following public comments regarding the proposed revisions to the "Comprehensive Supervision Guidelines for Financial Instruments Business Operators, etc." (← addressing so-called securities fraud). The US OpenID Foundation website is only available in English, so there is no appropriate space to post the Japanese version.
Further display Public comments have been submitted to the Financial Services Agency regarding the partial revision (draft) of the "Comprehensive Supervision Guidelines for Financial Instruments Business Operators, etc."
What is the UK's Online Safety Act? The UK's Online Safety Act was officially enacted into law on October 2023, 10, and will come into full effect on March 26, 2025 (the actual implementation date will be determined for each article). It requires online service providers to take measures against illegal or...
Further display [Age Verification] UK Online Safety Law is being toyed with in various ways: Bypassing it with VPNs and bypassing biometric authentication with Death Stranding
The NIST SP800-63-4 Digital Identity Guideline, which identity professionals have been eagerly awaiting, was finally published on August 8st. There are quite a few changes, and looking at the diff, 1 files changed +95...
Further display NIST SP800-63-4 Digital Identity Guidelines (final version) was published on July Thirty-one (US Time).
It's been a while, and my memory is a bit hazy... Below is what I summarized using NotebookLM, so I'll try to remember it as I rewrite it... (I get forgetful as I get older, which is a pain...) Overview On July 7th, Japan time, OAuth 25 was announced at IETF 123 Madrid...
Further display IETF 123: OAuth WG Session 2 Summary (25th Japan time)
Live Streaming Announcement: We will be doing a YouTube Live stream for the first time in a while, starting at 7 PM on July 28th. The topics will be the following public comments from the Ministry of Internal Affairs and Communications and the Financial Services Agency, as well as other general ID-related news. [References] Please join us! [Correction to remarks made during the live stream] At around 22:1:44...
Further display July 7th: We will be broadcasting live on YouTube regarding public comments from the Ministry of Internal Affairs and Communications and the Financial Services Agency, among others.