WS-SX TC Minutes, June 7 2006

["Marc Goodner" <mgoodner@microsoft.com>]

WS-SX TC Minutes, June 7 2006

We are grateful to IBM for sponsoring this call.

Summary of new Action Items:
none

1. Call to order/roll call
    
Present:
Jong Lee, BEA Systems, Inc.* 
Hal Lockhart, BEA Systems, Inc.* 
Corinna Witt, BEA Systems, Inc.* 
Rich Levinson, CA* 
Yakov Sverdlov, CA* 
Toshihiro Nishimura, Fujitsu Limited* 
Irving Reid, Hewlett-Packard* 
Greg Whitehead, Hewlett-Packard* 
Ching-Yun (C.Y.) Chao, IBM* 
Henry (Hyenvui) Chung, IBM* 
Heather Hinton, IBM* 
Kelvin Lawrence, IBM* 
Michael McIntosh, IBM* 
Anthony Nadalin, IBM* 
Ron Williams, IBM* 
Mike Lyons, Layer 7 Technologies Inc.* 
Kate Cherry, Lockheed Martin* 
Jan Alexander, Microsoft Corporation* 
Paul Cotton, Microsoft Corporation* 
Colleen Evans, Microsoft Corporation* 
Mark Fussell, Microsoft Corporation* 
Vijay Gajjala, Microsoft Corporation* 
Marc Goodner, Microsoft Corporation* 
Martin Gudgin, Microsoft Corporation* 
Chris Kaler, Microsoft Corporation* 
Asir Vedamuthu, Microsoft Corporation* 
Norman Brickman, Mitre Corporation* 
Frederick Hirsch, Nokia Corporation* 
Abbie Barbir, Nortel Networks Limited* 
Lloyd Burch, Novell* 
Steve Carter, Novell* 
Ashok Malhotra, Oracle Corporation* 
Prateek Mishra, Oracle Corporation* 
Darren Platt, Ping Identity Corporation* 
Martin Raepple, SAP AG* 
Don Adams, Tibco Software Inc.* 

Status Changes:
Added voting members
Rom Williams, IBM

Lost voting members 
Martijn de Boer, SAP AG
Dana Kaufman, Forum Systems, Inc.

2. Reading/Approving minutes of last meeting (May 31st 2006)
http://lists.oasis-open.org/archives/ws-sx/200605/msg00073.html

Adopted unanimously.

3. TC Logistics (10 minutes or less)

4. Issues list
http://docs.oasis-open.org/ws-sx/issues/Issues.xml
    
a) Review of action items
AI-2006-04-04-03 - Tony Nadalin to identify possible issues for SecurityPolicy based on the changes proposed for Issue 52.
In progress

AI-2006-04-04-08 - Marc Goodner with help from Prateek Mishra to document interop message flows based on the current version of SC/Trust.
In progress

AI-2006-04-05-04 - Chairs to do further work on a F2F meeting time and location.
Done.
Oct 4, 5 (Wed. and Thur.) at BEA in San Jose, CA.

AI-2006-05-03-03 - Tony will investigate and start thread on issue 67.
In progress.

b) Issues in Review status

  None.

    
c) New issues
i072 - Missing KeyWrapAlgorithm requirement in section 9.2
Accepted
Unanimous consent to move to pending.

i073 - Key and Encryption Requirements Clarification
Accepted
Unanimous consent to move to pending.

i074 - Add <EncryptSupportingToken> element to Sections 7.4 and 7.5
Accepted, Prateek assigned as owner.

i075 - HTTP Auth Subassertions
Accepted, Marc assigned as owner.


d) Active issues

i004 - Transitive closure spec dependencies
In progress.

i008 - Need well formed XML examples
In progress.

i031 - Clarification for UsernameToken assertion
Proposal has subassertions that are specified in WSS.
Hal believes that we should stop defining subassertions at the level of what is defined in WSS.
Other tokens should be specified by other organizations that own those tokens.
Furthermore other tokens, such as SAML or X.509, would require a lot more work than just doing UsernameToken as no one else would be doing so.

TC asks Greg Whitehead to lias with SS TC and inform them that we will not be creating assertions for SAML but we encourage them to do so.

Motion:
1. Adopt Proposal 1 from issue list:
http://lists.oasis-open.org/archives/ws-sx/200605/msg00063.html 

2. Limit scope of subassertions and tokens that we subassert on to WSS and WS-SX TCs.

3. Ask owners of tokens in other TCs to inform them we will not be creating assertions for their tokens but we encourage them to do so.

Adopted with unanimous consent, moved to pending.

i055 - Clarification on RequireDerivedKeys and X509Token under AsymmetricBinding
Closed with no action.

i066 - SecurityPolicy use cases
Expect something next week.

i067 - Resolving Policies if more than one SecureConversationToken is present
AI-2006-05-03-03

i070 - Clarify relationship between extensibility model and policy intersection
Prateek working on it, expect something today.

i071 - Guidance on Policy Application
TC asked to look at this for next call.


f) Pending issues
No update from editors this week.
Noted it would be good to get through more SP issues before asking editors for another update.

i033 - Identify security header components that are signed and/or encrypted

i048 - Binding Assertions should support Operation subjects

i065 - Permitting requestors to avoid recieving cancel messages

i069 - Default assertions and policy intersections



5. AOB

None.

6. Adjournment

The meeting adjourned at 7:36.