RE: What shall we name our specification(s)?

["Chanliau, Marc" <MChanliau@netegrity.com>]

You did, indeed, Bob. 
Marc

-----Original Message-----
From: George_Robert_Blakley_III@tivoli.com
[mailto:George_Robert_Blakley_III@tivoli.com]
Sent: Monday, January 29, 2001 5:02 PM
To: Chanliau, Marc
Cc: Orchard, David; Philip Hallam-Baker; 'Eve Maler';
security-services@lists.oasis-open.org
Subject: RE: What shall we name our specification(s)?


I second Marc's nomination here (in fact I think I suggested the same
thing).  I think "SAML" is the most descriptive
and accurately-scoped alternative.

--bob

Bob Blakley
Chief Scientist, Security
Tivoli Systems, Inc.


"Chanliau, Marc" <MChanliau@netegrity.com> on 01/29/2001 03:56:11 PM

To:   "Orchard, David" <dorchard@jamcracker.com>, Philip Hallam-Baker
      <pbaker@verisign.com>, "'Eve Maler'" <eve.maler@east.sun.com>,
      security-services@lists.oasis-open.org
cc:
Subject:  RE: What shall we name our specification(s)?




How  about SAML (Security Assertion Markup  Language).
Marc Chanliau
-----Original Message-----
From: Orchard, David  [mailto:dorchard@jamcracker.com]
Sent: Monday, January 29, 2001 4:44  PM
To: Philip Hallam-Baker; 'Eve Maler';
security-services@lists.oasis-open.org
Subject: RE: What shall we  name our specification(s)?


I  know you are keen on getting the focus on authorization, but I'm not too
interested in dropping authentication and keeping authorization.  Either
authent +author, or neither would be my interest.

Dave

-----Original Message-----
From: Philip Hallam-Baker  [mailto:pbaker@verisign.com]
Sent: Monday, January 29, 2001 12:23  PM
To: 'Eve Maler';  security-services@lists.oasis-open.org
Subject: RE: What shall we  name our specification(s)?


My  objection to A2ML was that specifying Authentication in the name to me
implies that we would be supporting authenticated key exchange, which is
something I don't want to do in an OASIS group, that is something I would
prefer to do in a closed group of cryptographers and network security
protocol engineers.

On  the other hand "Authorization Assertion Markup Language" would have the
initials A2ML, thus indicating the warm touchy feely get together vibes
people want, being clearly a descendent of S2ML and Auth XML (whose current
voting success I take note of).

Does anyone else have definite feelings towards the  binding of the second
A?

         Phill