[VER 2] WS-SX TC Minutes, May 17 2006

["Marc Goodner" <mgoodner@microsoft.com>]

WS-SX TC Minutes, May 17 2006

[VER 2] Added roll, correction under issue 33 proposal 1 should have
been proposal 2.

We are grateful to BEA Systems for sponsoring this call.

Summary of new Action Items:
none

1. Call to order/roll call
    
Present:
Jong Lee, BEA Systems, Inc.* 
Hal Lockhart, BEA Systems, Inc.* 
Denis Pilipchuk, BEA Systems, Inc.* 
Corinna Witt, BEA Systems, Inc.* 
Rich Levinson, CA* 
Yakov Sverdlov, CA* 
Dana Kaufman, Forum Systems, Inc.* 
Toshihiro Nishimura, Fujitsu Limited* 
Irving Reid, Hewlett-Packard* 
Ching-Yun (C.Y.) Chao, IBM* 
Henry (Hyenvui) Chung, IBM* 
Heather Hinton, IBM* 
Kelvin Lawrence, IBM* 
Michael McIntosh, IBM* 
Anthony Nadalin, IBM* 
Mike Lyons, Layer 7 Technologies Inc.* 
Kate Cherry, Lockheed Martin* 
Jan Alexander, Microsoft Corporation* 
Colleen Evans, Microsoft Corporation* 
Mark Fussell, Microsoft Corporation* 
Vijay Gajjala, Microsoft Corporation* 
Marc Goodner, Microsoft Corporation* 
Martin Gudgin, Microsoft Corporation* 
Chris Kaler, Microsoft Corporation* 
Norman Brickman, Mitre Corporation* 
Frederick Hirsch, Nokia Corporation* 
Abbie Barbir, Nortel Networks Limited* 
Lloyd Burch, Novell* 
Steve Carter, Novell* 
Ashok Malhotra, Oracle Corporation* 
Prateek Mishra, Oracle Corporation* 
Alex Hristov, Otecia Incorporated* 
John Hughes*, PA Consulting* 
Martijn de Boer, SAP AG* 
Martin Raepple, SAP AG* 
Hubert Le Van Gong, Sun Microsystems* 
Don Adams, Tibco Software Inc.*

Roll Change 
Ching-Yun (C.Y.) Choa from IBM is a Voting member now

2. Reading/Approving minutes of last meeting (May 10)
http://lists.oasis-open.org/archives/ws-sx/200605/msg00027.html

Adopted unanimously.

3. TC Logistics (10 minutes or less)

4. Issues list
http://docs.oasis-open.org/ws-sx/issues/Issues.xml
    
a) Review of action items
AI-2006-04-04-03 - Tony Nadalin to identify possible issues for
SecurityPolicy based on the changes proposed for Issue 52.
In progress.

AI-2006-04-04-08 - Marc Goodner with help from Prateek Mishra to
document interop message flows based on the current version of SC/Trust.
In progress.

AI-2006-04-05-04 - Chairs to do further work on a F2F meeting time and
location.
In progress.
Second week of October most likely. Noted possible conflicts with
Columbus Day and Canadian Thanksgiving.

AI-2006-04-12-01 - Prateek to review the text added per Issue 30 to see
if its explains sufficiently how to use the extensibility of SP to
describe token characteristics (related to Issue 31).
Done. 
http://lists.oasis-open.org/archives/ws-sx/200605/msg00036.html

AI-2006-04-12-02 - Hal to make a proposal on how to describe the usage
of the Username token re Issue 31.
Done.
http://lists.oasis-open.org/archives/ws-sx/200605/msg00032.html

AI-2006-05-03-01 - Gudge will investigate and start thread on issue 55.
Done.
http://lists.oasis-open.org/archives/ws-sx/200605/msg00033.html 

AI-2006-05-03-03 - Tony will investigate and start thread on issue 67.
In progress.

AI-2006-05-03-05 - Gudge to update pending schema issues by May 10th.
Done. 
No further changes needed from last update.

AI-2006-05-10-01 - Gudge will prepare proposal for issue 33.
Done.
http://lists.oasis-open.org/archives/ws-sx/200605/msg00035.html 


b) Issues in Review status
i020 - Describe minimum acceptable lengths for P_SHA1 inputs

i043 - Missing enumeration for validate request type in the
RequestTypeEnumdefinition

i063 - Error in the WS-SecurityPolicy Schema

i068 - Security considerations for relying parties

Adopted unanimously, issues moved to closed status.
    
c) New issues

i070 - Clarify relationship between extensibility model and policy
intersection Discussion of issue. 
Can an assertion with only an outer assertion match an assertion with a
matching outer assertion and additional inner assertions? 
Parameters should be used for additional information that is not used in
the matching algorithm.
Issue moved to active, assigned to Prateek.

d) Active issues

i004 - Transitive closure spec dependencies

i008 - Need well formed XML examples

i031 - Clarification for UsernameToken assertion Proposal 1
http://lists.oasis-open.org/archives/ws-sx/200605/msg00032.html
Review for next week.

i033 - Identify security header components that are signed and/or
encrypted 
Proposal 2
http://lists.oasis-open.org/archives/ws-sx/200605/msg00035.html
Review for next week.

i048 - Binding Assertions should support Operation subjects Proposal 5
http://lists.oasis-open.org/archives/ws-sx/200605/msg00019.html
Please discuss any objections to this proposal on the list.
Try again for next week.

i055 - Clarification on RequireDerivedKeys and X509Token under
AsymmetricBinding Discussion thread started per AI-2006-05-03-01
http://lists.oasis-open.org/archives/ws-sx/200605/msg00033.html
Need feedback from the issue filer and the TC on the list to determine
whether or not anything needs to be done in the spec.
Review for next week.

i066 - SecurityPolicy use cases
In progress, one use case on UsernameToken. Proposals around issue 31
may impact this.

i067 - Resolving Policies if more than one SecureConversationToken is
present
AI-2006-05-03-03

i069 - Default assertions and policy intersections Proposal 1
http://lists.oasis-open.org/archives/ws-sx/200605/msg00016.html
No objections to adopting proposal. Status changed to pending.

f) Pending issues
i065 - Permitting requestors to avoid recieving cancel messages

5. AOB

Both chairs will be unavailable next week, suggestion to take next week
off.
No objections to taking next week off.
Kelvin will send notice to the list.

6. Adjournment

The meeting adjourned at 7:42 AM PST.

Marc Goodner
Technical Diplomat
Microsoft Corporation
Tel: (425) 703-1903
Blog: http://spaces.msn.com/mrgoodner/