{"action":"closed","issue":{"url":"https://api.github.com/repos/usnistgov/800-63-3/issues/523","repository_url":"https://api.github.com/repos/usnistgov/800-63-3","labels_url":"https://api.github.com/repos/usnistgov/800-63-3/issues/523/labels{/name}","comments_url":"https://api.github.com/repos/usnistgov/800-63-3/issues/523/comments","events_url":"https://api.github.com/repos/usnistgov/800-63-3/issues/523/events","html_url":"https://github.com/usnistgov/800-63-3/issues/523","id":204389685,"number":523,"title":"RE: surrender or prove destruction of any physical authenticator ","user":{"login":"wangxjnj","id":20907390,"avatar_url":"https://avatars.githubusercontent.com/u/20907390?v=3","gravatar_id":"","url":"https://api.github.com/users/wangxjnj","html_url":"https://github.com/wangxjnj","followers_url":"https://api.github.com/users/wangxjnj/followers","following_url":"https://api.github.com/users/wangxjnj/following{/other_user}","gists_url":"https://api.github.com/users/wangxjnj/gists{/gist_id}","starred_url":"https://api.github.com/users/wangxjnj/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wangxjnj/subscriptions","organizations_url":"https://api.github.com/users/wangxjnj/orgs","repos_url":"https://api.github.com/users/wangxjnj/repos","events_url":"https://api.github.com/users/wangxjnj/events{/privacy}","received_events_url":"https://api.github.com/users/wangxjnj/received_events","type":"User","site_admin":false},"labels":[{"id":369794812,"url":"https://api.github.com/repos/usnistgov/800-63-3/labels/63B","name":"63B","color":"c5def5","default":false},{"id":365342588,"url":"https://api.github.com/repos/usnistgov/800-63-3/labels/decline","name":"decline","color":"b60205","default":false}],"state":"closed","locked":false,"assignee":{"login":"jimfenton","id":1020212,"avatar_url":"https://avatars.githubusercontent.com/u/1020212?v=3","gravatar_id":"","url":"https://api.github.com/users/jimfenton","html_url":"https://github.com/jimfenton","followers_url":"https://api.github.com/users/jimfenton/followers","following_url":"https://api.github.com/users/jimfenton/following{/other_user}","gists_url":"https://api.github.com/users/jimfenton/gists{/gist_id}","starred_url":"https://api.github.com/users/jimfenton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimfenton/subscriptions","organizations_url":"https://api.github.com/users/jimfenton/orgs","repos_url":"https://api.github.com/users/jimfenton/repos","events_url":"https://api.github.com/users/jimfenton/events{/privacy}","received_events_url":"https://api.github.com/users/jimfenton/received_events","type":"User","site_admin":false},"assignees":[{"login":"jimfenton","id":1020212,"avatar_url":"https://avatars.githubusercontent.com/u/1020212?v=3","gravatar_id":"","url":"https://api.github.com/users/jimfenton","html_url":"https://github.com/jimfenton","followers_url":"https://api.github.com/users/jimfenton/followers","following_url":"https://api.github.com/users/jimfenton/following{/other_user}","gists_url":"https://api.github.com/users/jimfenton/gists{/gist_id}","starred_url":"https://api.github.com/users/jimfenton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimfenton/subscriptions","organizations_url":"https://api.github.com/users/jimfenton/orgs","repos_url":"https://api.github.com/users/jimfenton/repos","events_url":"https://api.github.com/users/jimfenton/events{/privacy}","received_events_url":"https://api.github.com/users/jimfenton/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2017-01-31T18:52:18Z","updated_at":"2017-02-03T21:03:03Z","closed_at":"2017-02-03T21:03:03Z","body":"### All Fields Are Required\r\n**Organization Name (N/A, if individual):** N/A\r\n\r\n**Organization Type (see below for codes)**: 4\r\n \r\n**Document (63-3, 63A, 63B, or 63C)**: 63B\r\n\r\n**Reference (Include section and paragraph number)**: 6.3, 6.4\r\n The CSP SHALL require subscribers to surrender or prove destruction of any physical authenticator containing certified attributes signed by the CSP as soon as practical \r\n**Comment (Include rationale for comment)**:\r\n Not sure what the \" certified attributes signed by the CSP\" referring to. \r\n\r\nphysical authenticator usually holds cryptic keys:\r\n1. OTP hardware authenticator -- useless once expired, or unassigned/deleted at the CSP side(seed no longer valid)\r\n2. crypt hardware device -- the key is also useless once the binding broken at the CSP side.\r\n3. crypt device may hold multiple keys with multiple CSPs.  And the device may be an BYOD. \r\n**Suggested Change**:\r\n should not require subscribers to surrender or prove destruction of any physical authenticator. \r\n---\r\n \r\nOrganization Type: 1 = Federal, 2 = Industry, 3 = Academia, 4 = Self, 5 = Other"}}
{"actor":{"display_login":"jimfenton"}}