Update on NIST's digital identity guidelines
summary
Revision 4 draft is imminent and refocuses the base volume on risk-based tailoring and continuous integration with fraud and transaction telemetry, elevates equity and usability, and adds a low-friction IAL1 for lower-risk proofing. New mechanics include trusted referees and applicant references, acceptance of mobile driver's licenses and verifiable credentials as digital evidence, biometric performance requirements for remote ID proofing, stronger phishing resistance via channel/name binding, clarified FALs, and security guidance for provisioning and identity APIs.
AI-written summary · about
chapters (10)
- 0:00Introduction to NIST 863-4
- 0:44Purpose and context of 863
- 2:28Drivers for new revisions
- 6:20Consistency and core changes
- 7:31Updates to the base document
- 10:34Changes in identity proofing
- 13:13Authentication improvements
- 14:58Federation and assertions
- 16:03Call for public feedback
- 18:42Q&A and concluding remarks
related talks
51mPrivate org & govt perspectives in navigating the tech landscape of remote digital identity proofing
26mFireside Chat: A discussion about draft NIST 800-63-4 and all things digital identity
38mDigital Identity - Improving the necessary evil
40mAre You Really You? Higher Assurance Identity Proofing to the Rescue!
19mVerifying Humanness: Personhood Credentials for the Digital Identity Crisis
28mDigital Identities: The fundament for a digital society
24mDigital Native’s Needs & Wants from Financial Services Providers
51mHealth Credentials, Travel, Climate Change, Financial Inclusion & More: Digital Identity Gets Real