Assurance

["Michael R. Gettes" <>]

and if an email address is a valid AoR (and it is) - one has to then realize 
the physical AoR doesn't have to be very meaningful - it just has to 
demonstrate a valid method of communicating with the subject to verify 
identity.  note, in this process, when an AoR changes it isn't validated 
unless some event occurs to require validation which, I believe, will be rare 
at best.

/mrg

On Sep 17, 2012, at 11:05, Renee Shuey 
<>
 wrote:

> Hi Steven,
> 
> The TAC subgroup who worked on "refining" the Silver specifications spent a 
> good bit of time on discussing this one.  We chose the wording in support 
> of each campus determining what "address of record" means to them.
> 
> And Mark is right, it is more about the practices/procedures that are in 
> place to bind the individual to that address and then use that recorded 
> address (whatever type it is) to prove that is the individual.  
> 
> Renee
> 
> 
> 
> ----- Original Message -----
> From: "Mark B Jones" 
> <>
> To: 
> 
> Sent: Monday, September 17, 2012 11:00:17 AM
> Subject: RE: [Assurance] identity proofing, address of record .....
> 
> My first reaction is to say no.
> The main concern seems to be the ability for the subject to receive 
> communications at the address of record.  But I think the spirit of the 
> thing is that the address of record not be issued by the enterprise.  
> 
> For example if you wanted to use the campus email address as the address of 
> record, how will the subject receive his credential at his address of 
> record so he can access his address of record to get his credential ;)
> 
> But depending on how your campus box numbers are issued it may be up to the 
> auditor.  If the subject must appear in person with picture ID to claim 
> their campus mail box then that might be a very reasonable way to deliver 
> their credentials.
> 
> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Steven Carmody
> Sent: Monday, September 17, 2012 9:38 AM
> To: 
> 
> Subject: [Assurance] identity proofing, address of record .....
> 
> Hi,
> 
> Can a subject's "Address of Record" be a campus box number ? (ie a paper 
> mail address issued by the enterprise) ?