WS-SX TC Minutes, Aug 8, 2007

WS-SX TC Minutes, Aug 8, 2007

Summary of new Action Items:
None

1. Call to order/roll call

Meeting is quorate.

Status Change:

1. Lloyd Burch is out of LOA

2. Lost Voting Status: Dr. Ching-Yun (C.Y.) Chao, IBM.

Attendance:

Symon Chang;BEA Systems, Inc.

Will Hopkins;BEA Systems, Inc.

Corinna Witt;BEA Systems, Inc.

Toshihiro Nishimura;Fujitsu Limited*

Henry (Hyenvui) Chung;IBM

Kelvin Lawrence;IBM

Michael McIntosh;IBM

Anthony Nadalin;IBM

Bruce Rich;IBM

Mike Lyons;Layer 7 Technologies Inc.*

Jan Alexander;Microsoft Corporation

Vijay Gajjala;Microsoft Corporation

Marc Goodner;Microsoft Corporation

Chris Kaler;Microsoft Corporation

Norman Brickman;Mitre Corporation*

Frederick Hirsch;Nokia Corporation*

Abbie Barbir;Nortel

Steve Carter;Novell*

Rich Levinson;Oracle Corporation

Ashok Malhotra;Oracle Corporation

Prateek Mishra;Oracle Corporation

Martin Raepple;SAP AG*

Tony Gullotta;SOA Software Inc.

Jiandong Guo;Sun Microsystems

Don Adams;TIBCO Software Inc.

2. Reading/Approving minutes of last meeting (July 11) 

http://lists.oasis-open.org/archives/ws-sx/200708/msg00006.html

Adopted unanimously. 

  

3. TC Logistics (10 minutes or less) 

Charter clarification approved, updated charter has been posted.

  

4. Issues list 

http://docs.oasis-open.org/ws-sx/issues/Issues.xml

a) Review of action items

AI-2007-05-15-03 - Editors will create draft errata docs for SX specs using the WSS errata documents as a template

Expect to be done this month, probably not before next call though.

AI-2007-06-13-01 - Marc Goodner: Make a proposal for ER006 to the list.

Expect to have a proposal before the next call.

b) Issues in Review status

i136 - Incorrect URI for password digest in the example

i138 - Editorial correction in WS-SP usecases draft Example 2.2.3

i139 - Incorrect spelling of Issued Tokens WS-SP usecases draft Example 2.2.3

i140 - Incorrect order of <Timestamp> element for Strict Layout

i144 - Typo error in Section 2.2.4

i145 - Incorrect Order of Message signature in WSS11 Mutual Auth Scenario

i147 - Contradictory statements made in WSS10 Mutual Auth Scenario

Moved to closed.

c) New issues

i148 Syntax of XPath for Signed, Encrypted and Required Elements

Marc’s comments on rationale for proposal:

http://lists.oasis-open.org/archives/ws-sx/200708/msg00005.html

Symon to work on new example to motivate change.

Symon and Will to work on normative text regarding use of namespace declarations that is already permitted.

d) Active issues

i135 - Need provision in the spec/schema for attachment content signature

Tony Nandalin still working on this.

i137 - Support for more stringent security implementation in WS-SP as per requirements in WS-SP Usecases document

In latest update:

http://lists.oasis-open.org/archives/ws-sx/200708/msg00009.html

Moved to review.

i142 - Examples 2.2.3 and 2.2.4 are miss-labeled

Further explanation:

http://lists.oasis-open.org/archives/ws-sx/200708/msg00008.html

Proposal applied in latest update:

http://lists.oasis-open.org/archives/ws-sx/200708/msg00009.html

Further discussion needed in email.

i146 - Example to illustrate a response message

No disagreement that this is a good idea.

Concern that this would require additional resources to do this.

No one volunteering to do the work.

Rich offered to do for one example as an example to help the discussion.

ER006 - The specification states that if [Timestamp] is false, then wsu:Timestamp should not be present inside <wsse:Security> header.

Pending AI-2007-06-13-01.

ER012 - Review normative RFC 2119 language in WS-Trust

ER013 - Review normative RFC 2119 language in WS-SecureConversation

ER014 - Review normative RFC 2119 language in WS-SecurityPolicy

Marc expects to get something proposed toward the end of this month.

f) Pending issues

i143 Typo in Example 2.1.1.3 Message examples editorial

http://lists.oasis-open.org/archives/ws-sx/200708/msg00009.html

Moved to review.

ER001 Inconsistent IncludeToken URI between spec and schema xsd file ws-sp editorial

ER002 Editorial comments on SP ws-sp editorial

ER003 Clarification of policy usage for derived keys in SC ws-sp, ws-sc editorial

ER004 Wrong Security Context Token assertion in example ws-sp editorial

ER007 Minor editorial addition to <ContentEncryptedElements> Assertion ws-sp editorial

ER009 Policy Assertion Parameters and alternatives ws-sp design

ER010 Typo in the Security Header Layout section ws-sp editorial

ER011 Modification request for issue PR014

Pending AI-2007-05-15-03.

5. AOB
Next call on 22^nd.
Call week of US Thanksgiving cancelled.

6. Adjournment

ws-sx message