RE: [security-jc] FW: security forum program

[Darran Rolls <Darran.Rolls@waveset.com>]

Some comments, observations and suggestions:

Re Benefits.  Now that this is a jointly sponsored event, it shows the
world that we are all working together...

Re Agenda "Security Standards Architecture - 3".  Does this imply that
we should have a draft of a common "vocabulary/taxonomy" defined and
presented?  How does this effect/imply acceptance of 1.3 in [1]?

Re Agenda "Liberty Alliance". IMO we should clearly address MS-Passport
as well (integration and co-existence if nothing else).  I say this as
MSFT is participating in the conference, there are a number of .NET
sessions on track and it's something we are going to have to at least
discuss anyway.

Re Agenda "Access Control and DRM".  I know this is somewhat
self-serving, but I'd like to see a discussion on provisioning (PSTC and
SPML) as well.  As a general ramble, it's interesting to consider the
question "how does an identity or an access decision-rule get there in
the first place?" This is so very often forgotten or ignored, but is a
critical part of end-to-end WS delivery.

[1]
http://lists.oasis-open.org/archives/security-jc/200207/msg00005.html

--------------------------------------------------------
Darran Rolls                      http://www.waveset.com
Waveset Technologies Inc          drolls@waveset.com 
(512) 657 8360                    PSTC/SSJC/WSA-WG
--------------------------------------------------------


> -----Original Message-----
> From: Krishna Sankar [mailto:ksankar@cisco.com]
> Sent: Wednesday, July 10, 2002 11:48 AM
> To: security-jc@lists.oasis-open.org
> Subject: [security-jc] FW: security forum program
> 
> FYI.
> 
> cheers
> 
> -----Original Message-----
> From: Krishna Sankar [mailto:ksankar@cisco.com]
> Sent: Wednesday, July 10, 2002 9:46 AM
> To: 'Karl F. Best'
> Cc: 'tab'
> Subject: RE: security forum program
> 
> 
> Agreed. Good idea. I would like to make sure that they have some good
> points - not fluffy slides o;)
> 
> Have attached the new document.
> 
> cheers
> 
> |  -----Original Message-----
> |  From: Karl F. Best [mailto:karl.best@oasis-open.org]
> |  Sent: Wednesday, July 10, 2002 8:28 AM
> |  To: ksankar@cisco.com
> |  Cc: Karl
> |  Subject: security forum program
> |
> |
> |  Krishna:
> |
> |  In the afternoon sessions you have some open time for
> |  industry-specific presentations. May I suggest that one of these
> |  sessions be for industry analysts (e.g. Gartner)? Let them tell us
> |  what we need to do.
> |
> |  </karl>
> |  =================================================================
> |  Karl F. Best
> |  OASIS - Director, Technical Operations
> |  +1 978.667.5115 x206
> |  karl.best@oasis-open.org  http://www.oasis-open.org
> |
> |
> |  -----Original Message-----
> |  From: Patrick Gannon [mailto:patrick.gannon@oasis-open.org]
> |  Sent: Tuesday, July 09, 2002 1:16 PM
> |  To: Karl Best
> |  Cc: Eduardo Gutentag
> |  Subject: FW: Will standards ease Web services security?
> |
> |
> |  Karl,
> |
> |  This was one of the articles carried in Dee's XML Daily News.  It
has
> |  interviews with analysts from Gartner & MetaGroup.  The Gartner
> |  analysts
> |  makes some excellent points and maybe we should have a panel
> |  discussion with
> |  2 or 3 analysts to provide their viewpoints of what is needed going
> |  forward.
> |
> |  Patrick
> |
> |
> |  _____________________________________________________________
> |  _________
> |  ______
> |  ______
> |
> |  Will standards ease Web services security?
> |  By Vivienne Fisher ZDNet Australia July 8, 2002, 8:00 AM PT
> |  http://zdnet.com.com/2100-1105-942013.html
> |
> |  Some of the industry's major vendors will soon submit Web services
> |  security
> |  specifications. But is it enough to protect businesses against the
> |  threats?
> |
> |
> |
> |
> |