Raw chat trace of meeting #197 on 2017-OCT-30

["Mr. Stefan Hagen" <stefan@hagen.link>]

Juan Carlos1: 1. Welcome by the chair (Stefan Hagen)
2. Minutes taker
All write into the chat, Stefan assembles and uploads into document area.
3. Roll call
Juan Carlos1: EJ, AK, JC
Juan Carlos1: We have quorum
Juan Carlos1: 4. Approval of the agenda
5. Approval of minutes from previous calls
5.1 Minutes from call #196 on 2017-10-02:
URL = https://www.oasis-open.org/committees/download.php/61896/dss-x-minutes-20171002-196.txt
Juan Carlos1: Approved
Juan Carlos1: 6. Core v2.0 issues discussion
6.1 Mitigation of protocol level threats
6.1.1 Defending against "Exploiting the use of canonicalization as content extractor"
Discussion on "To embed or not to embed XML fragments"
Juan Carlos1: AK has contacted with a researcher expert in XML for checking the actual relevance of the threat, but it may take time to get his answer
Juan Carlos1: JC accepts dropping inclusion of XML signatures in plain XML within the requests.
Juan Carlos1: AK: asks about known implementations of DSS.
Juan Carlos1: JC will pass contacts of people in Madrid, Barcelona and Bilbao.
Juan Carlos1: 6.2 Conversion and validation tools for the DOCX, JSON, and XSD "triangle"
6.2.1 Proposal / Analysis from Andreas Kuehne
URL = https://lists.oasis-open.org/archives/dss-x/201708/msg00102.html
Juan Carlos1: AK is progressing the old stuff from the version 1.0 to version 2.0. He will be able to circulate a new version fo the core v2.0
Juan Carlos1: JC: by the end of November an ETSI TS 119 442 will be made public for getting comments. It would be great to have something stable on the DSS core v2.0
Juan Carlos1: AK: I am confident that we could have something pretty stable at least at the level of committee draft.
Juan Carlos1: AK: or at least having being pushed forward if status not reached
Juan Carlos1: 7. Profiles
Juan Carlos1: 8. Next meeting
Suggested to meet again on 2017-NOV-13 (usual bi-weekly schedule)
Juan Carlos1: Agreed
Juan Carlos1: 9. AOB
Juan Carlos1: JC: New STF 539 for producing specifications for remote signing server.
Juan Carlos1: AK: Nick Pope sent an email introducing the editor of the spec for the protocol based on DSSX.
Juan Carlos1: AK: suggests that chairs answer this email.
Juan Carlos1: JC will do it