5/4/04 preliminary minutes

["Don Flinn" <flinn@alum.mit.edu>]

Enclosed is the 5/4/04 preliminary minutes.  Attendance list to be added.
Please send all comments, and errors to the list.

Don

=============================================================

5/4/04 Minutes for the WSS telecom

I.	Roll Call – Quorum achieved 35 out of 65

II. Minutes for 4/20/04 – Approved – No objections

III. Version 1.0 update to errata etc. be posted today for review by TC

IV. Status of Profiles
SAML document sufficient for its interop
XrML v6; issue 279 & URI updated
Kerberos profile is out.  Request for the TC to comment on this version of
the profile, so it may be firmed up.

V. Issues:
273 & 274 pending on Ron.  Nothing done on these issues.  They may be
completely defined by SAML.  One example needs a name qualifier update.
277 Open Kerberos – TGT is protected by key from KDC so it is not applicable
to wss.  TC please review and comment.
278 Closed with no action
279 Closed Wording to cover this issue is in the new version of profile, to
be reviewed by TC
280 Closed
·	Prateek Mishra asked to be recorded that he is concerned about some of the
statements made about the SAML spec. in this call.
·	All those participating in the SAML interop should to review the material
information that has been posted to the web site and decide what is
appropriate for their company.
·	Andrew Nash to post pointer to information to the web site.
New issue - Guidance for password key derivation.  Mail on 2/24/04 “Password
based key derivation” WSS 200402/msg 00060.html discussed this issue.
Chairs to put this issue on the next agenda

VI. Interop –
XrML Package is out
SAML interop date still holding for 17 May

VII – Once errata out to list wss document should go to V1.1 with all errata
included.  No objections

VIII. When are we going to start planning for v2.0?  Answer; First thing is
get SAML, XrML and Kerberos profiles finished.

Kerberos – Chairs Asked for interest in Kerberos interop and also asked for
a volunteer to champion a Kerberos interop.

Need sponsors for next few calls.

Scheduling – no break for summer planned.

Hal – read minutes from 3/9/04 re: key from password.  No specification
exists on this.  The TC will address this in a future version of the wss
spec.

Proposal to move open issues to a new version of list with a pointer to the
old list. As modified - Archive all closed issues.  Postponed issues need to
be carried forward.  The result will be an archived list and a new open
list. No objections.

TC to review SAML/XrML interop

====================
Donald Flinn
President
Flint Security LLC
Phone: 781/856-7230
e-mail: flinn@alum.mit.edu
http://flintsecurity.com