Minutes for 30-Nov SSTC Focus meeting

["Philpott, Robert" <rphilpott@rsasecurity.com>]

Dial in info: +1 865 673 6950 #351-8396

 

Attendance:

-          Rob Philpott

-          Darren Platt

-          Rick Randall

-          Scott Cantor

-          Forest Yin

-          Steve Anderson

-          Frederick Hirsch

-          Greg Whitehead

-          Nick Ragouzis

-          James Vanderbeek

 

1.       Spec updates:

• Conformance cd-02a (Prateek) - http://lists.oasis-open.org/archives/security-services/200411/msg00123.html

Rob: Changes look okay to me. One typo needs to be fixed.

Scott: The column he added looks okay to him.

No other discussion.

 

2.      List comments

• Typos in DSIG URI’s: http://lists.oasis-open.org/archives/security-services/200411/msg00120.html

Scott – will fix asap and post update.

 

• Response to conformance comments: http://lists.oasis-open.org/archives/security-services/200411/msg00121.html

No discussion.

 

• IPR Question: http://lists.oasis-open.org/archives/security-services/200411/msg00126.html

Rob: We simply need to ensure that OASIS IPR Policy and TC process are followed.

Steve: Will RSA make its statement against SAML 2.0?

Rob: I’m not sure that is necessary.  The previous claims still apply and are independent of the version.

Scott, Steve: Would like to have RSA restate its IP claims for 2.0. So should AOL.

Rob: I will look into getting an RSA statement posted and will also follow up with Conor re: AOL.

General discussion re: other claims at Liberty site: We can’t require non-OASIS members to make declarations. 

Rob: I believe that, technically, the only OASIS members that MUST make any statements re: IPR are those that make input submissions to a TC and those that make attestations of implementation.  These requirements have been satisfied (so far).

Rob: I will also follow up with Jamie re: whether we can at least put a mention on the SSTC IPR page that other claims may be present and refer folks to the Liberty site for additional info about possible licensing requirements.

Greg, Scott – As mentioned we just have to abide by the OASIS process.

 

3.      Reminders:

• Attestations: We have 2 (Entrust, Sun). We MUST have 3 before submitting by 15-Dec deadline.
• Need comments on Paul’s Exec Overview: http://lists.oasis-open.org/archives/security-services/200411/msg00002.html
• Need comments on Greg’s SAML 1.x metadata: http://lists.oasis-open.org/archives/security-services/200411/msg00012.html

 

Rob Philpott
Senior Consulting Engineer 
RSA Security Inc.
Tel: 781-515-7115
Mobile: 617-510-0893
Fax: 781-515-7020
mailto:rphilpott@rsasecurity.com