ISC2 membership web site remodeling competition

[rslade]

> Frank_Mayer (Newcomer III) posted a new reply in Member Support on 07-11-2019

> To top it off the membership verification site
> att https://webportal.isc2.org/custom/certificationverification.aspx has been
> down for at least two days

I suspect it's down permanently. For some reason ISC2 seems to have switched to
https://www.isc2.org/MemberVerification
(Possibly something to do with tying everything back to the new payment system
...)

> and the digital badges from Aclaim showing our skilss
> and verification are broken now after working for years.    

Ah. Hadn't known that ...

(Whatts! We losts badges! Oh! The Precioussssss!!!)

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
When you add the body scanners, the ritual humiliation of old
ladies with knitting needles and the farcical air marshals, it
all adds up to billions of dollars to prevent what? A politician
being called soft on terror, that's what.
- senior aviation executive
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

[Scottmage]

Quick update, I found out that since my renewal was on the cusp of the Web Site change, it will be resolved on or before 15 July.

[denbesten]

---

@AlecTrevelyan wrote:

With the old one you could send a link with your name and member ID prepopulated.

---

That functionality is available with the Acclaim Digital badges (example), with the added benefit of not disclosing your member ID number.

The only real downside to the acclaim solution is that you need to set it up (although that gives you control over what is displayed) and that it has the word "badge" on it, which causes discontent for a few members of our community.

[AlecTrevelyan]

Thanks @denbesten.

Even though I use links to my Acclaim badges on my LinkedIn profile (I've made this comment before - see link below) there is something to be said about validating someone's certs directly with the cert vendor as opposed to through a third party. So being able to do that easily through a single URL which prepopulates the required fields just makes everyone's lives easier.

https://community.isc2.org/t5/Member-Support/Validating-someone-s-Cert/m-p/23826/highlight/true#M448...

[Shannon]

Yes, I just tested it too. I must say I was a bit surprised that it went smoothly --- the way things are going with the rest of the site, I was expecting an error or at least some lag when I clicked on 'Search.'   

[denbesten]

---

@AlecTrevelyan wrote:

...validating someone's certs directly with the cert vendor...

---

Too bad that the Acclaim badge site does not have an (ISC)² URL, like was done for community and cpe to implicitly let everyone know that the third-party is authorized.

[AlecTrevelyan]

---

@denbesten wrote:

---

@AlecTrevelyan wrote:

...validating someone's certs directly with the cert vendor...

---

Too bad that the Acclaim badge site does not have an (ISC)² URL, like was done for community and cpe to implicitly let everyone know that the third-party is authorized.

---

Not sure what you mean by the CPE portal as you'd need to give someone your login for them to use that to validate your certs.

With regards to the Community badge system, I can tell you for certain that is not a source of truth so can't be used for validation.

I have one certificate badge (ISSAP) that should show up that doesn't, and one certificate badge (ISSMP) that does show up but shouldn't - not yet anyway!

[CraginS]

---

@Scottmage wrote:
I wonder if they have heard of

Section 508 of the Rehabilitation Act of 1973
The U.S. Department of Defense is commited to making its electronic and information technologies accessible to individuals with disabilities in accordance with Section 508 of the Rehabilitation Act (29 U.S.C § 794d), as amended in 1999.

We have to post it on the site I help support - AND we have to be compliant as well.

---

Scott,

Section 508 applies only to sites (and any computer interfaces) of U.S. government activities.

Thus, the (ISC)2 sites are not mandated to meet Section 508 requirements.

That said, it has some excellent guidance and standards, and I believe should be used by any and all web sites and computer programs.

Lots of good information at the official support site:

https://www.section508.gov

[denbesten]

I apologize for the non-clarity.  I was not proposing cpe nor community be used as a source of certificate validation.   I was responding to your observation that the chain of trust is missing with youracclaim.com.

Today, we ask "who is youracclaim.com and what right do they have to validate a certificate?".   This is a good question that does not come up with community, cpe, webportal2 or www.  We understand those all belong to (ISC)² because they all end in ".isc2.org". Fixing the lack of trust could be as simple as changing the site name to "youracclaim.isc2.org".

[AlecTrevelyan]

Ah ok, I understand your point now. Yes, pretty much all of ISC2's infrastructure is now delivered by 3rd parties, such as Lithium and Salesforce so I guess Acclaim is just another of their partners.

However, Acclaim do have more partners than just ISC2 (pretty much everyone for whom Pearson VUE proctor exams), so that may pose some issues with branding when accessing a member's Acclaim profile through the isc2.org domain that also has another vendor's certs attached.

Unless they can restrict the Acclaim profile to show just the ISC2 certs when it's accessed through the isc2.org domain of course.