OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

dss-x message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: DSS-X Conference Call #252


Event Title: DSS-X Conference Call #252

Date: Monday, 02 November 2020, 06:00pm to 07:00pm CET
RSVP
This meeting counts towards voter eligibility.

Agenda

1. Welcome by the Chair (Andreas)

2. Minutes taker
All write into the chat(http://webconf.soaphub.org/conf/room/dss-x), Andreas assembles and uploads into document area.

3. Roll call

4. Approval of the agenda

5. Approval of minutes from previous calls

5.1 Minutes from call #251 on 07 Sep 2020:
URL = "">

6. DSS-X documents

6.1 Progress of DSS-X Core

- publication of CVE
    CVE-2020-13101 assigned, waiting for approval
    info teaser published
    status of CVE-2020-13101?

    
- topics for CS03
    
DSSX-63: Section 6 of the core cs02 references a non-existing element 'SignatureType' of OptionalInputsVerify
DSSX-64: Reference JSON schema in Swagger and OAS files

collecting additional topics
planning for CS03 together with some profiles

6.2 Problems verifying XML and JSON schema

- local and remote schema locations
- due to JSON Validator „tberman.json-schema-validator“: Invalid schema: dereference error
- due to OpenAPI validator „mermade.openapi-lint“ : 'incContent' invalid

    status of stefan's multi-TC efforthttps://github.com/WebOfTrustInfo/ld-signatures-java.git
 

7. Profiles
- Evidence, JSON Signature and X.509 profiles next for CD.
first draft of Evidence Record Validation profile at https://www.oasis-open.org/committees/document.php?document_id=67046&wg_abbrev=dss-x

Received comment from Tobias Wich: https://lists.oasis-open.org/archives/dss-x-comment/202007/msg00000.html
Response and open topic (response URL) at https://lists.oasis-open.org/archives/dss-x-comment/202007/msg00001.html

updated version pending

- JSON Canonicalization
Any agreed standard? RFC 8785

Implementations (thanks to Anders):
Java: https://mvnrepository.com/artifact/io.github.erdtman/java-json-canonicalization/1.1
_javascript_: https://www.npmjs.com/package/canonicalize
.NET Core: https://github.com/cyberphone/json-canonicalization/tree/master/dotnet
Python 3.X: https://github.com/cyberphone/json-canonicalization/tree/master/python3
go: https://github.com/cyberphone/json-canonicalization/tree/master/go


- AdES
JAdES uses http://json-schema.org/draft-07/schema#. Any need for us to align?

- Verifiable Credentials
Java implentations
https://github.com/jsonld-java/jsonld-java URDNA-2015 missing

https://github.com/WebOfTrustInfo/ld-signatures-java.git more promising


8. Next meeting

Suggested to meet again on 16 Nov 2020
Note: Starting at 18:00 local time in Central Europe


9. AOB

Anders's JSON signature spec: https://github.com/cyberphone/jws-jcs
Use case: https://connect2id.com/blog/how-to-secure-json-objects-with-hmac

 



Owner: Mr. Andreas Kuehne
Group: OASIS Digital Signature Services eXtended (DSS-X) TC
Sharing: This event is shared with the OASIS Open (General Membership), and General Public groups. Public Event Link
  • Learn more about subscribing here.
  • View the OASIS Digital Signature Services eXtended (DSS-X) TC calendar here.
  • You may receive future notifications with updates to this event. Update the event on your calendar by accepting the changes.

Attachment: ical_50654.ics
Description: application/ics

BEGIN:VCALENDAR
CALSCALE:GREGORIAN
METHOD:REQUEST
VERSION:2.0
PRODID:-//Kavi Corporation//NONSGML Kavi Groups//EN
X-MS-OLK-FORCEINSPECTOROPEN:TRUE
BEGIN:VTIMEZONE
TZID:Europe/Paris
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
STATUS:CONFIRMED
TRANSP:OPAQUE
DTSTAMP:20201101T212855Z
DTSTART;VALUE=DATE-TIME;TZID=Europe/Paris:20201102T180000
DTEND;VALUE=DATE-TIME;TZID=Europe/Paris:20201102T190000
SEQUENCE:0
SUMMARY:DSS-X Conference Call #252
LAST-MODIFIED:20201101T212855Z
ORGANIZER:workgroup_mailer@lists.oasis-open.org
ATTENDEE;CUTYPE=GROUP:MAILTO:dss-x@lists.oasis-open.org
DESCRIPTION:\n\nAgenda: 1. Welcome by the Chair (Andreas)\n\n2. Minutes 
 taker\nAll write into the chat(http://webconf.soaphub.org/co
 nf/room/dss-x)\, Andreas assembles and uploads into document
  area.\n\n3. Roll call\n\n4. Approval of the agenda\n\n5. Ap
 proval of minutes from previous calls\n\n5.1 Minutes from ca
 ll #251 on 07 Sep 2020:\nURL = https://www.oasis-open.org/co
 mmittees/document.php?document_id=67733&wg_abbrev=dss-x\n\n6
 . DSS-X documents\n\n6.1 Progress of DSS-X Core\n\n- publica
 tion of CVE\n    CVE-2020-13101 assigned\, waiting for appro
 val\n    info teaser published\n    status of CVE-2020-13101
 ?\n\n    \n- topics for CS03\n    \nDSSX-63: Section 6 of th
 e core cs02 references a non-existing element &#39\;Signatur
 eType&#39\; of OptionalInputsVerify\nDSSX-64: Reference JSON
  schema in Swagger and OAS files\n\ncollecting additional to
 pics\nplanning for CS03 together with some profiles\n\n6.2 P
 roblems verifying XML and JSON schema\n\n- local and remote 
 schema locations\n- due to JSON Validator &bdquo\;tberman.js
 on-schema-validator&ldquo\;: Invalid schema: dereference err
 or\n- due to OpenAPI validator &bdquo\;mermade.openapi-lint&
 ldquo\; : &#39\;incContent&#39\; invalid\n\n    status of st
 efan&#39\;s multi-TC efforthttps://github.com/WebOfTrustInfo
 /ld-signatures-java.git\n \n\n7. Profiles\n- Evidence\, JSON
  Signature and X.509 profiles next for CD.\nfirst draft of E
 vidence Record Validation profile at https://www.oasis-open.
 org/committees/document.php?document_id=67046&wg_abbrev=dss-
 x\n\nReceived comment from Tobias Wich: https://lists.oasis-
 open.org/archives/dss-x-comment/202007/msg00000.html\nRespon
 se and open topic (response URL) at https://lists.oasis-open
 .org/archives/dss-x-comment/202007/msg00001.html\n\nupdated 
 version pending\n\n- JSON Canonicalization\nAny agreed stand
 ard? RFC 8785\n\nImplementations (thanks to Anders):\nJava: 
 https://mvnrepository.com/artifact/io.github.erdtman/java-js
 on-canonicalization/1.1\nJavaScript: https://www.npmjs.com/p
 ackage/canonicalize\n.NET Core: https://github.com/cyberphon
 e/json-canonicalization/tree/master/dotnet\nPython 3.X: http
 s://github.com/cyberphone/json-canonicalization/tree/master/
 python3\ngo: https://github.com/cyberphone/json-canonicaliza
 tion/tree/master/go\n\n\n- AdES\nJAdES uses http://json-sche
 ma.org/draft-07/schema#. Any need for us to align?\n\n- Veri
 fiable Credentials\nJava implentations\nhttps://github.com/j
 sonld-java/jsonld-java URDNA-2015 missing\n\nhttps://github.
 com/WebOfTrustInfo/ld-signatures-java.git more promising\n\n
 \n8. Next meeting\n\nSuggested to meet again on 16 Nov 2020\
 nNote: Starting at 18:00 local time in Central Europe\n\n\n9
 . AOB\n\nAnders&#39\;s JSON signature spec: https://github.c
 om/cyberphone/jws-jcs\nUse case: https://connect2id.com/blog
 /how-to-secure-json-objects-with-hmac\n\n \nGroup: OASIS Dig
 ital Signature Services eXtended (DSS-X) TC\nCreator: Mr. An
 dreas Kuehne
URL:https://www.oasis-open.org/apps/org/workgroup/dss-x/event.php?event_id=50654
UID:https://www.oasis-open.org/apps/org/workgroup/dss-x/event.php?event_id=50654
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:REMINDER
TRIGGER;RELATED=START:-PT00H15M00S
END:VALARM
END:VEVENT
END:VCALENDAR


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]