Re: [pkcs11] Draft minutes for review

John, all OASIS interop events follow the OASIS Interop Policy so it isn't really a mater of whether or not you agree to this or not - it just happens to be how things work.

In the past we have attempted to perform Interop Demonstrations for PKCS#11 but never actually managed to meet the requirements and have operated effectively as an Interop Showcase each year and there have been vendors who have taken rather different approaches to attempting to perform interop with some vendors investing a lot of resources and other vendors not even attempting to perform interoperability between each vendor.

The discussion in the meeting and the motion (and hence the TC decision) was simply to reflect reality - nothing has actually changed in terms of what the PKCS#11 participation at RSA 2017 will be - we are just using the correct OASIS label for what we have been doing each year which makes it clearer to the participants what is expected. Nothing prevents vendors from performing point-to-point interop (as always).

In terms of what each OASIS interop event is required to focus on you can simply refer to 1.1 Goals (all of it) and the lead in paragraph to 2 Participation. The events have never been intended or meant to operate as a vendor-specific marketing event - everything operates in the context of OASIS and the specific OASIS standard that each vendor is representing. This is nothing new.

In terms of requirements being clear on the documents signed up for - this is also already covered (this year and in previous years) so suggesting this should be added when it is already present and vendors including yourself have already signed up for multiple times including this year for RSA 2017 is a little confusing.

Quoting the text from the Interop Participation form mailed out at https://www.oasis-open.org/apps/org/workgroup/pkcs11/email/archives/201603/msg00001.html and the direct PDF link

at https://www.oasis-open.org/apps/org/workgroup/pkcs11/email/archives/201603/msg00001/Interop-Participation-PKCS11-KMIPForm2017.pdf

Confirmed participants will be responsible to actively engage in the pre-show technical discussions and abide
by the technical requirements outlined by the Interop Team/TC (in accordance with the OASIS Interop Policy).
Participants will also be responsible for bringing any company equipment that may be used as part of their
participation.

Participants are encouraged to review the OASIS Interop Policy in advance:
www.oasis-open.org/policies-guidelines/interop

Thanks,

Tim.

On Thu, Nov 10, 2016 at 11:27 AM, John Leiseboer <JL@quintessencelabs.com> wrote:

Thanks Valerie. That helps. The definition for Interop Showcase in the link you posted is:

"Interop Showcases provide a common venue for demonstrating members’ products that support an OASIS Standard or Committee Specification. Because full compliance with a defined demonstration scenario is not required, an Interop Showcase is easier to organize and may be more readily accessible to a broader range of members."

I guess this means that all participants can demonstrate their products that support the PKCS#11 standard. But I understand that we should not be using this as a vendor-specific product marketing/promotion/sales opportunity. Focus should be on promoting the standard, not the vendor products. I'm happy to go along with this if this is agreed by the TC and booth participants. Perhaps this should be captured in the minutes and/or a document that we sign up to for inclusion in the showcase?

Thanks,
John

> -----Original Message-----
> From: pkcs11@lists.oasis-open.org [mailto:pkcs11@lists.oasis-open.org] On

> Behalf Of Valerie Fenwick
> Sent: Thursday, 10 November 2016 12:10 PM
> To: pkcs11@lists.oasis-open.org
> Subject: Re: [pkcs11] Draft minutes for review - 09-Nov-2016
>
> Hi John -
>
> Hopefully this helps:
>
> https://www.oasis-open.org/policies-guidelines/interop
>
> This is to reflect more what we hve been doing for PKCS#11.
> We can still do some interop, but because we can't truly do an N<->N
> interop (as you can't make two libraries talk
> PKCS#11 to each other), but we can show, for example, an application on
> top of a SOlaris or Linux library.
>
> This should still be a demonstration of our PKCS#11 capabilities, our
> dedication to the standard's body and discussions of our future work. It
> should *not* be straight out vendor marketing presentations, if that makes
> sense?
>
> At least that is my understanding.
>
> I believe you still must be a member of the TC, but you do not need to be
> a voting member. I believe observers may participate as well.
>
> Valerie
>
> On 11/9/2016 5:02 PM, John Leiseboer wrote:
> > Sorry that I couldn’t attend today’s call – I was tied up with other
> > business. I noted the following I the minutes:
> >
> >
> >
> > *Motion to alter the TC's participation in the RSA 2017 Interop as a
> > Showcase (rather than a Demonstration) with Tony acting the interop
> > lead.*
> >
> > Can someone provide more information on what this means please? For
> > example, does this mean that non-members of the PKCS#11 TC can
> > participate? Does this mean there will be no interop testing prior to
> > the conference? Does “showcase (rather than a demonstration)” mean no
> > demonstration of capability, but perhaps just marketing presentations?
> >
> >
> >
> > Thanks,
> >
> > John
> >
> >
> >
> > *From:*pkcs11@lists.oasis-open.org
> > [mailto:pkcs11@lists.oasis-open.org] *On Behalf Of *Tony Cox
> > *Sent:* Thursday, 10 November 2016 8:52 AM
> > *To:* pkcs11@lists.oasis-open.org
> > *Subject:* [pkcs11] Draft minutes for review - 09-Nov-2016
> >
> >
> >
> > Hi folks,
> >
> > Minutes from today's call are posted for review at
> > https://wiki.oasis-open.org/pkcs11/Meetingminutes/Minutes09112016
> > <https://wiki.oasis-open.org/pkcs11/Meetingminutes/Minutes09112016#pre
> > view>
> >
> > Thanks,
> > -Tony
> >
> >
> > ______________________________________________________________________
> > This email has been scanned by the Symantec Email Security.cloud
> > service for QuintessenceLabs Pty Ltd.
> > ______________________________________________________________________
> >
>
> --
> Valerie Fenwick, http://bubbva.blogspot.com/ @bubbva Solaris Cryptographic
> & Key Management Technologies, Manager Oracle Corporation: 4180 Network
> Circle, Santa Clara, CA, 95054.
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail. Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
>
>
> ______________________________________________________________________
> This email has been scanned by the Symantec Email Security.cloud service
> for QuintessenceLabs Pty Ltd.
> ______________________________________________________________________

pkcs11 message