Proposed Minutes for SSTC Call (10/27/2015) - NOTE NEW BRIDGE

[Nate Klingenstein <ndk@internet2.edu>]

> 1. Roll Call & Agenda Review.

Thomas
Scott
Nate
Hal
Mert Aybat
Robert van Herk
Rainer Hoerbe

There was some confusion as to whether voting rights were per person or per organization, but quorum was achieved regardless, and we will ensure that each individual who should have voting rights is granted voting rights.

> 2. Need a volunteer to take minutes.

Nate volunteered to take minutes.

>   - Minutes from July 7th 2015 meeting:
> https://lists.oasis-open.org/archives/security-services/201507/msg00002.html
>   - Minutes from August 4th 2015 meeting:
> https://lists.oasis-open.org/archives/security-services/201508/msg00006.html
>   - Minutes from 1 Sept 2015 meeting:
> https://lists.oasis-open.org/archives/security-services/201509/msg00008.html

Nobody objected to a summary vote for adoption of all three sets of minutes.  Hal moved that the minutes be adopted and Scott seconded.  There were no objections or amendments.

>  (c) Protocol Extension work for 2.1
>     - Any updates?

No updates were ready for the present call, but Connectis agreed to take ownership of the item and there is a proposal under active development.

>  (d) SAML 2.1 work:
>      - SAML2.1 wiki:
>        https://wiki.oasis-open.org/security/SAML2Revision

There were no updates on this work.

>  (e) XSPA updates (Mohammad Jafari)
>     - Any updates.

Mohammad wasn’t available to join the call.

> 5. Assorted mail items:

The main reason that Scott has been pushing for redline incorporation was to clear way for some additional errata, particularly an omission around replay and message freshness that is a significant consideration and a minor security consideration in certain contexts.  This would give us the chance to clear that backlog and start fresh pursuant to another round of approval, allowing us to start off the next round of errata inclusion with a fresh slate.

> 7. Next SSTC Call:
>   - Tuesday 24 November 2015.

We look forward to hearing from you then, and we will likely continue with this conference call bridge for awhile given the stability issues plaguing alternative services.  The SSTC extends its regrets to our international participants for the inconvenience or expense.