[security-services] Agenda for con-call, 12 noon Eastern Time (US),February 4, 2003

["Mishra, Prateek" <pmishra@netegrity.com>]

Agenda for Tuesday, February 4, 2003

Call-in Numbers:

+1 334 262 0740

code: 856956

Courtesy: SUN microsystems

 

1. Agenda bashing

2. Acceptance of minutes from January 21 Con Call

http://lists.oasis-open.org/archives/security-services/200301/msg00013.html

3. Review (and approve?) V1.1 work items

4. Action Item review

5. Any other business

6. Adjourn

-----------------------------------------------

3. Propopsed SAML 1.1 work items

Acceptance Criteria:

Bugs that are backwards-compatible (targeted to 1.1)

Functionality that's backwards-compatible/orthogonal and high-priority

The list as a whole can be completed in 3-6 months

Any decision that needs to be made in the short term

The below items are in no particular order [A.* numbering taken from original list]:

+ [A.1] Metadata for formalizing operational agreements between sites.

1. See also AI-27 below.

01 draft and response to reviewers comments published in

http://lists.oasis-open.org/archives/security-services/200301/msg00020.html

http://lists.oasis-open.org/archives/security-services/200301/msg00021.html

http://lists.oasis-open.org/archives/security-services/200302/msg00002.html

+ [A.2] WS-Security profile ([3], possibly to go to WSS TC)

1. Closed.

+ [A-3] Figure out versioning of modularly published profile and binding specs

1. See AI-19 below

+ [A-4] Sharpen conformance language around the notions of profiles vs. extensions

1. See AI-6 below

+ [A-5] Express that an assertion should not be cached

1. Hal Lockhart's proposal: http://lists.oasis-open.org/archives/security-services/200211/msg00011.html

+ [A-6] Fix fragment identifier gaffe [4]

1. Approved proposal on this.

2. Needs to be incorp'd in specs.

3. See AI-15.

+ [A-7] Standardize issuer name formats

1. See AI-25 below.

2. Original request came from XACML: http://lists.oasis-open.org/archives/security-services/200211/msg00012.html

+ [A-8] Fix xmldsig issues

1. For 1.1, Scott's dsig doc to become a non-normative component of the spec set.

http://lists.oasis-open.org/archives/security-services/200212/msg00007.html

2. Also see AI-18.

Additional Proposed V1.1 Work Items:

+ [A-9] Fix items from the Errata List (see AI-29)

Jahan has published new version capturing errors to date

http://lists.oasis-open.org/archives/security-services/200302/msg00000.html

+ Additional web browser flows as suggested by interop and Shib experiences

Scott has published use-cases describing the proposed new flows extending

the SAML 1.0 web browser profiles

http://lists.oasis-open.org/archives/security-services/200302/msg00003.html

+ Review SAML error model; message from Carlisle

http://lists.oasis-open.org/archives/security-services/200302/msg00001.html

+ Are there additional work items? We plan to VOTE and CLOSE the SAML v1.1 list on

February 17, 2003.

4. List of Action Items

------------------------

. Action Items carried over from previous conference call:

AI-6. Jeff to determine if conformance language around the notions of profiles vs. extensions is really an issue

AI-12. Prateek to draft analysis of use of XML Encryption in SAML

no champion, deferred to SAML 2.0

AI-15. Editor (Eve) to update documents with Eve's fragment ID recommendations

AI-18. Irving to consult w/ Merlin Hughes on current XMLDSig issues

AI-19. RobP will go back and look in issues list and see what he can come up with wrt item [A.3] in the SAML v1.1 to-do list.

closed

AI-20. Eve to update specs to 1.0

AI-25. Eve to respond to Hal's IssuerName proposal with an attribute-based & an element-based solution

AI-26. Carlisle to update Mike Just's credentials collection proposal

carlisle is owner but deferred to SAML 2.0

AI-27. Prateek to rev draft-sstc-meta-data-00 and add in schema.

done

AI-28. RobP to have RSAS convey a new "statement of licensing intent" to the SSTC that documents the additional two claimed applicable patents in addition to the prior two.

AI-29. Jahan to start and own Errata list for current specs

done

AI-30. Scott to produce use case document for destination site first flow using Web Browser Profiles (Target late January)

done

AI-31. Jeff to send email to list on his interpretation of IPR issues surrounding using Liberty material

AI-32. Rob will draft a usecase for an Attribute Authority, to be examined by the TC for profiling

AI-33. Eve to update the charter based on discussion

 

5. Any other business?

----------------------