Draft Minutes from SSTC Telecon (17 May 2011) - without Attendance

[Hal Lockhart <hal.lockhart@oracle.com>]

> 1. Roll Call & Agenda Review.

Attendance


 
> 2. Need a volunteer to take minutes.

Hal to take minutes.

> 
> 3. Approval of minutes from last meetings:
> 
> - Minutes from SSTC Call on 5 April 2011:
> 
> http://www.oasis-open.org/apps/org/workgroup/security/email/ar
> chives/201105/msg00020.html

Minutes approved unanimously 

> 
> 
> - Minutes from SSTC Call on 19 April 2011:
> 
> http://www.oasis-open.org/apps/org/workgroup/security/email/ar
> chives/201105/msg00021.html
> 
> 
Meeting notes approved unanimously

> - Minutes from SSTC Call on 3 May 2011:
> 
> http://www.oasis-open.org/apps/org/workgroup/security/email/ar
> chives/201105/msg00004.html
> 
> 
Meeting notes approved unanimously
> 
> 4. AIs & progress update on current work-items:
> 
>   (a) Current electronic ballots:
>       - Session Token Profile - Just closed
>       - 8 out of 13 votes yes (62%).
> 
>   (b) Status/notes regarding past ballots: (none).
> 
>   (c) Session Token Profile (Hal)
>       - Status: CSD Published.
>       - Status: CSD 30-day PR requested on 22 Feb 2011.
>       - Any updates? 

Profile was reviewed from April 1 to May 1
Ballot was held to create new CSD based on WD 07 and hold 15 day review - passed
New CSD requested May 16

> 
>   (d) Attribute Predicate Profile (Gregory/Franz-Stefan)
>       - AI: split doc into SAML and XACML profile.
>       - AI: will email new version to SSTC.
>       - Status: WD01 uploaded May 17.

Changes: only one predicate per query and per statement
         return of predicate is optional (can get only decision)
         extended description
         reduced description of XACML condition processing
         new status codes
         summary table
         removed references to local and global variables
         modified examples

Scott: don't see reference to assertion query profile, need binding if you want interoperable conformance
section 3 called profile should be called a protocol. Take a look at original SAML 2.0 profile spec

Scott: Normative references need to conform to OASIS format requirements

> 
>   (e) Kerberos Attribute Profile: [Josh/Thomas]
>       - Status: CSD 15-day PR started on 22 Feb 2011 & closed 
> 27 Mar 2011.
>       - Status: No comments received from 30-day PR.
>       - AI: Request SSTC vote for Committee Specification 
> (CS) Ballot Request.

the 3 Kerberos documents need to proceed together
Attribute profile got comments and was changed
  
TC approved moving Kerberos Attribute Profile WD 02 to CSD and to 15 day Public review


>     
>   (f) Change Notify Protocol Version 1.0 (Thin/Phil)
>       - Status: CSD Published.
>       - Status: WD05 posted on 9 May 2011.

All changes are editorial. Added acknowledgements.
VOTE

> 
>   (g) Channel binding proposal (Scott)
>       - Status: awaiting other items in other groups.
>       - Any updates?

No updates

> 
>   (h) Enhanced Client or Proxy Profile (Scott)
>       - Status: WD02 uploaded last week.
>       - Status: work waiting for items in IETF Kitten WG.
>       - Any updates?
> 
No updates

>   (i) Metadata Extensions for Documentation/Registration (Chad)
>       - Status: WD04 uploaded 18 March 2011.
>       - Status: CSD01 specification has been posted.
> 
> http://www.oasis-open.org/apps/org/workgroup/security/email/ar
> chives/201105/msg00012.html
> 

Minor typos have been reported. Will create new working draft and go for new CSD on next call.

> 
>   (i) Errata document (Scott):
>       - SECURITY-7 and -9 resolved/closed.
>       - Any other updates?
> 
Security -11 clarification meaning of no name attribute in matadata schema
Approved for processing

> 
> 
> 5. Assorted mail items:
>    - W3c Identity in the Browser workshop (24-25 May, Mountain View)
>      http://www.w3.org/2011/identity-ws/

Thomas: suggest those attending report back to TC


Adjourned


Hal