Raw chat trace of meeting #3 - 2017-JAN-25

["Mr. Stefan Hagen" <stefan@hagen.link>]

[18:13] Room information was updated by: Stefan Hagen
OASIS CSAF TC DECEMBER MEETING (Conference Call) #3
- Wednesday, 25 January 2016, 01:00pm to 02:00pm EST (UTC-5)
  - i.e. 2016-12-25 19:00 to 20:00 CET (UTC+1)
  - i.e. 2016-12-26 04:00 to 05:00 AEST (UTC+10)
  - other timezone? Try eg.:
    - http://www.timeanddate.com/worldclock/meetingdetails.html?year=2017&month=1&day=25&hour=18&min=0&sec=0&p1=47&p2=69&p3=179

Meeting Member URL:
- URL = https://www.oasis-open.org/apps/org/workgroup/csaf/event.php?event_id=43849
  - Please use starting approx. 15 minutes before the meeting for self registration. Thanks.
    - Self registration link (as a service):
      - https://www.oasis-open.org/apps/org/workgroup/csaf/record_my_attendance.php?event_id=43849&confirmed=1 

Agenda-Draft E-Mail URL:
- E-Mail Public URL = https://lists.oasis-open.org/archives/csaf/201701/msg00016.html

Minutes Draft Public URL (previous meeting):
- URL = https://www.oasis-open.org/committees/download.php/59762/csaf-minutes-20161214-meeting-2.html

Voice and Screenshare (WEBEX MEETING):
- Join By URL: 
  - https://cisco.webex.com/cisco/j.php?MTID=mef3d86408c9d05079621625195aad613
  - Meeting number (access code): 205 963 971
  - Host key: 448505
  - Meeting password: 32KbRC2A (32527222 from phones)
- Join By Phone (ISO 3166-1 alpha-3 letter codes):
  -  +61.2.8446.5260 (Toll) [AUS, Sydney]
  -  +32.2.704.5072 (Toll) [BEL, Brussels]
  -  +49.619.6773.9002 (Toll) [DEU, Eschborn] 
  -  +44.20.7496.3743 (Toll) [GBR, London]
  -     0120.312271 (Toll-Free) [JPN]
  -  +81.3.5763.9394 (Toll) [JPN, Tokyo]
  -  +31.20.357.1487 (Toll) [NLD, Amsterdam]
  - +966.1.218.2666 (Toll) [SAU, Riyadh]
  -   +1.866.432.9903 (Toll-free) [USA|CAN]
  -   +1.408.525.6800 (Toll) [US|CAN]

---
Agenda:
- Roll Call
- Approval of Agenda
- Approval of Minutes from Previous Meeting #2 (2016-12-14)
  - URL = https://www.oasis-open.org/committees/download.php/59762/csaf-minutes-20161214-meeting-2.html
- Status of current activities and contributions
- Current Open JIRA Issues
- Any Other Business
- Adjourn
[18:50] Stefan Hagen: PartInfo[Voting Members: 2 of 29 (6%) (used for quorum calculation) ]
[18:56] Stefan Hagen: PartInfo[Voting Members: 4 of 29 (13%) (used for quorum calculation) ]
[18:57] Stefan Hagen: PartInfo[Voting Members: 5 of 29 (17%) (used for quorum calculation) ]
[18:58] anonymous morphed into Duncan Sparrell
[18:58] Stefan Hagen: PartInfo[Voting Members: 8 of 29 (27%) (used for quorum calculation) ]
[19:00] Stefan Hagen: PartInfo[Voting Members: 11 of 29 (37%) (used for quorum calculation) ]
[19:00] Stefan Hagen: PartInfo[Voting Members: 12 of 29 (41%) (used for quorum calculation) ]
[19:03] Stefan Hagen: PartInfo[Voting Members: 12 of 29 (41%) (used for quorum calculation)]
[19:04] Stefan Hagen: PartInfo[Voting Members: 13 of 29 (44%) (used for quorum calculation) ]
[19:06] Stefan Hagen: Call started (waiting for quorum 2 members with voting rights missing)
[19:06] anonymous morphed into Harold Booth
[19:06] anonymous1 morphed into Lothar Braun
[19:06] Stefan Hagen: PartInfo[Voting Members: 13 of 29 (44%) (used for quorum calculation) ]
[19:08] anonymous1 morphed into Patrick Maroney
[19:08] anonymous2 morphed into Beth Pumo
[19:08] anonymous morphed into Kent Landfield
[19:08] Stefan Hagen: PartInfo[Voting Members: 14 of 29 (48%) (used for quorum calculation) ]
[19:08] Stefan Hagen: Agenda approved
[19:08] anonymous morphed into Vincent Danen
[19:09] Stefan Hagen: as presented in slide via webex
[19:09] Stefan Hagen: topic sandbox and first contribution
[19:09] Stefan Hagen: Omar suggests all review and give feedback via mail or slack
[19:10] Stefan Hagen: no questions so far
[19:10] Stefan Hagen: Lothar went through the schema and as a potential provider had no open questions.
[19:11] Stefan Hagen: Lothar also talked with consumers of CVRF and received feedback and requests for further additions to aid in consitency
[19:11] Stefan Hagen: Lothar would suggest to provide these additions along with CVRF v1.2
[19:12] Stefan Hagen: Still not quorate! Voting Members: 14 of 29 (48%) (used for quorum calculation)
[19:13] Stefan Hagen: All discuss how to best consolidate the feedback to channel it into the upcoming revision
[19:14] Stefan Hagen: Vincent would like to have a CVRF 1.1 also inside the sandbox so we can provide a diff of the changes
[19:14] Stefan Hagen: All agree this is a good idea to at least provide the diff
[19:14] Stefan Hagen: Next topic namespace for 1.2 version - comments received from Stefan.
[19:15] Stefan Hagen: Feng highlights, that in the OASIS namespace naming conventions, the tc name becomes the protocol name, while they are used to keep it as CVRF
[19:16] Stefan Hagen: Vincent suggests to keep CVRF and later only switch to CSAF (TC name) to not confuse for minor changes
[19:16] Stefan Hagen: Harold seconds to keep the namespace
[19:17] Stefan Hagen: Duncan chimes in that in sync with only changing minor version number, we should keep the namespace
[19:17] Stefan Hagen: Thus if it is backward compatible, keep it.
[19:18] Stefan Hagen: Discussion on CVRSSv2 versus v3
[19:19] Stefan Hagen: Vincent would be against breaking changes in 1.2 (that would be CVRSS v2 moving to v3)
[19:19] Stefan Hagen: Lothar understands the proposed changes for 1.2 as exactly doing this
[19:20] Stefan Hagen: A mixing is suggested to work around the v2 v3 problematic
[19:21] anonymous morphed into David Waltermire
[19:21] Patrick Maroney: What's criteria for Voting Rights?  Two meeting attendance?
[19:22] Stefan Hagen: Release and Review timeframe for CVRF 1.2 (new topic)
[19:22] Stefan Hagen: @Patrick: In a nutshell yes, I guess it is 3 out of five ...
[19:23] Stefan Hagen: Vincent thinks February is reasonable
[19:23] Stefan Hagen: (Mid February as review timeframe
[19:23] Stefan Hagen: all other dates TBD
[19:25] Stefan Hagen: Omar highlights that also announcements etc. should be well planned ahead and together with OASIS staff
[19:25] Stefan Hagen: Harold asks what other changes will be part of CVRF1.2 other than CVSS v2 -> v3?
[19:26] Stefan Hagen: Omar mentions XML to ... format changes
[19:26] Stefan Hagen: Omar mentions signatures etc.
[19:26] Stefan Hagen: Omar hints at JIRA issues keeping note of other changes,
[19:26] Stefan Hagen: Omar states that all agreed to try shift these changes at least to v 2.0
[19:27] Stefan Hagen: We are quorate: Voting Members: 15 of 29 (51%) (used for quorum calculation)
[19:29] Stefan Hagen: Kent moves to approve the minutes of last meeting duncan seconds
[19:30] Stefan Hagen: Motion carries
[19:31] Stefan Hagen: motion to stop allowing changes for 1.2 until february 1st
[19:31] Stefan Hagen asks: who moved?
Magic 8-Ball says: It is decidedly so
[19:34] Stefan Hagen: Stefan moves to constrain changes for 1.2 on CVSSv3 related ones
[19:34] Stefan Hagen: motion seconded
[19:34] Stefan Hagen: Unanimous consent, motion carries
[19:35] Stefan Hagen: Feng asks something about compatibility ?
[19:37] Stefan Hagen: Feng states, that new documents will have to be validated against the new schema, old ones against the old one, so no old stuff needs to remain in the new schema (scribes understanding)
[19:38] Stefan Hagen: All discuss namespaces and backward compatibility
[19:39] Stefan Hagen: Lothar points out, score set is mandatory, so if we add version 3 ...
[19:40] Stefan Hagen: SO Feng suggests to make version 2 optional
[19:40] Stefan Hagen: All discuss, if it is currently optional or mandatory ...
[19:41] Stefan Hagen: Omar suggests to move the conversation to email or slack
[19:42] Stefan Hagen: Lou moves to set the review timeframe to Februaryy 15
[19:42] Stefan Hagen: Lothar asks what happens if we find out, the changes will be compatibility breaking?
[19:43] Stefan Hagen: Omar and Lothar discuss, that whatever comes out at 2017-02-15, will be input for subsequent meeting so we can decide
[19:45] Stefan Hagen: Next scheduled meeting is one week after that date 22, February
[19:46] Stefan Hagen: All understand, that this gives time to consolidate
[19:46] Stefan Hagen: Stefan moves to keep it at Feb 15 (the review deadline). Lothar seconds
[19:46] Stefan Hagen: Unanimous consent, the motion carries.
[19:47] Stefan Hagen: Omar suggests all willing to contribute and participate do so using mailing list and slack
[19:48] Stefan Hagen: .. also contribute to JIRA opening or commenting on issues
[19:48] Stefan Hagen: No other business.
[19:48] Stefan Hagen: Lou moves to adjourn. Seconded
[19:48] Stefan Hagen: meeting closed