Raw chat trace of meeting #5 - 2017-MAR-29

["Mr. Stefan Hagen" <stefan@hagen.link>]

[14:42] Room information was updated by: Stefan Hagen
---
OASIS Common Security Advisory Framework (CSAF) TC Weekly Meeting (Conference Call) #5
- Wednesday, 29 March 2017, 01:00pm to 02:00pm EST (UTC-5)
  - i.e. 2017-03-29 19:00 to 20:00 CEST (UTC+2)
  - other timezone? Try eg.:
    - http://www.timeanddate.com/worldclock/meetingdetails.html?year=2017&month=3&day=29&hour=18&min=0&sec=0&p1=47&p2=69&p3=179

Meeting Member URL:
- URL = https://www.oasis-open.org/apps/org/workgroup/csaf/event.php?event_id=44454
  - Please use starting approx. 15 minutes before the meeting for self registration. Thanks.
    - Self registration link (as a service):
      - https://www.oasis-open.org/apps/org/workgroup/csaf/record_my_attendance.php?event_id=44454&confirmed=1 

Agenda-Draft E-Mail URL:
- E-Mail Public URL = https://lists.oasis-open.org/archives/csaf/201703/msg00022.html

Minutes Draft Public URL (previous meeting):
- URL = https://www.oasis-open.org/committees/download.php/60372/csaf-minutes-20170222-meeting-4.html

Voice and Screenshare (WEBEX MEETING):
- Join By URL: 
  - https://cisco.webex.com/cisco/j.php?MTID=mef3d86408c9d05079621625195aad613
  - Meeting number (access code): 205 963 971
  - Host key: 448505
  - Meeting password: 32KbRC2A (32527222 from phones)
- Join By Phone (ISO 3166-1 alpha-3 letter codes):
  -  +61.2.8446.5260 (Toll) [AUS, Sydney]
  -  +32.2.704.5072 (Toll) [BEL, Brussels]
  -  +49.619.6773.9002 (Toll) [DEU, Eschborn] 
  -  +44.20.7496.3743 (Toll) [GBR, London]
  -     0120.312271 (Toll-Free) [JPN]
  -  +81.3.5763.9394 (Toll) [JPN, Tokyo]
  -  +31.20.357.1487 (Toll) [NLD, Amsterdam]
  - +966.1.218.2666 (Toll) [SAU, Riyadh]
  -   +1.866.432.9903 (Toll-free) [USA|CAN]
  -   +1.408.525.6800 (Toll) [US|CAN]

Agenda:
- Roll Call (please register yourselves short before the meeting - thanks)
  - URL = https://www.oasis-open.org/apps/org/workgroup/csaf/record_my_attendance.php?event_id=44454&confirmed=1
- Approval of Agenda
- Approval of Minutes from Previous Meeting #4 (2017-02-22)
  - URL = https://www.oasis-open.org/committees/download.php/60372/csaf-minutes-20170222-meeting-4.html
- Status of current activities and contributions
  - Review of version 1.2 candidate CSD01 WD01 revision 2017-03-29
  - Sample Motion 
    -  I move that the TC approve CSAF Common Vulnerability Reporting Framework (CVRF)
       Version 1.2 Working Draft 01 and all associated artifacts packaged together in 
       https://www.oasis-open.org/committees/download.php/60393/csaf-cvrf-1.2-csd01-wd01.zip 
       as Committee Specification Draft 01 and designate the Microsoft Word version of 
       the specification as authoritative. I further move that the TC approve submitting 
       the aforementioned Committee Specification Draft 01 for 30 days of public review. 
- Any Other Business
- Adjourn

Slides:
  - URL = https://www.oasis-open.org/committees/download.php/60375/CSAF-CVRF-v-1-2-CSD01-WD01-draft-2017-03-24-editor-notes-lo-res.pdf

Chat:
  - URL = http://webconf.soaphub.org/conf/room/csaf  # <-- this place 
[14:43] Stefan Hagen: RegInfo{Voting Members: 1 of 27 (3%) (used for quorum calculation)}
[18:43] Stefan Hagen: RegInfo{Voting Members: 2 of 27 (7%) (used for quorum calculation)}
[18:51] Stefan Hagen: RegInfo{Voting Members: 2 of 27 (7%) (used for quorum calculation)}
[18:54] Stefan Hagen: RegInfo{Voting Members: 3 of 27 (11%) (used for quorum calculation) }
[18:55] anonymous morphed into Omar Santos (Cisco)
[18:56] Troy Fridley morphed into Troy Fridley (Cisco)
[18:56] Stefan Hagen: RegInfo{Voting Members: 4 of 27 (14%) (used for quorum calculation)}
[18:57] Stefan Hagen: RegInfo{Voting Members: 5 of 27 (18%) (used for quorum calculation)}
[18:59] anonymous1 morphed into Jared Semrau
[18:59] Stefan Hagen: RegInfo{Voting Members: 5 of 27 (18%) (used for quorum calculation)}
[19:00] Stefan Hagen: RegInfo{Voting Members: 6 of 27 (22%) (used for quorum calculation)}
[19:01] Stefan Hagen: RegInfo{Voting Members: 6 of 27 (22%) (used for quorum calculation)}
[19:02] Stefan Hagen: RegInfo{Voting Members: 7 of 27 (25%) (used for quorum calculation)}
[19:03] Stefan Hagen: RegInfo{Voting Members: 9 of 27 (33%) (used for quorum calculation)}
[19:04] Stefan Hagen: Chair announces that without quorum we will start with informative items
[19:04] Stefan Hagen: Please all register so we may obtain quorum during meeting. Otherwise we will have to move  or vote via email
[19:07] Stefan Hagen: Philip Boles has hand raised
[19:08] Stefan Hagen: RegInfo{Voting Members: 10 of 27 (37%) (used for quorum calculation)}
[19:09] Stefan Hagen: Mistake - lowered
[19:09] Stefan Hagen: hand
[19:12] Stefan Hagen: eric raised some nits on mailing list but does not consider those ax blocking a first public comments release
[19:15] Stefan Hagen: harold asks if CSAF-21 has been applied?
[19:15] Stefan Hagen: Stefan states that yes
[19:16] Stefan Hagen: feng and harold discuss the v1.1 situation w.r.t mandatory or optional CVSSScoreSets
[19:20] Stefan Hagen: feng suggests to leave cvss3 mandatory and if some vendor only supports v2 cvss they should stay with cvrf v1.1 so couple chaff cvrf v1.2 with mandatory cvss v3
[19:20] Stefan Hagen: all discuss the 2 dimensional version matrix combinations and the implication
[19:22] Stefan Hagen: art asks for if cvrf 1.2 should require 0 or more of both versions cvss?
[19:23] Stefan Hagen: feng suggests to have 1 or more cvss v3 and 0 or more cvss v2
[19:24] Stefan Hagen: art suggests to have a vote
[19:24] Stefan Hagen: omar notes this must be via mail as meeting is not quorate
[19:24] Stefan Hagen: art will do
[19:25] Stefan Hagen: omar opens the floor for questions
[19:25] Stefan Hagen: no questions
[19:26] Stefan Hagen: meeting adjourned by chair