Minutes for 30-Nov SSTC Focus meeting

Dial in info: +1 865 673 6950 #351-8396

 

Attendance:

-         
Rob Philpott

-         
Darren Platt

-         
Rick Randall

-         
Scott Cantor

-         
Forest Yin

-         
Steve Anderson

-         
Frederick Hirsch

-         
Greg Whitehead

-         
Nick Ragouzis

-         
James Vanderbeek

 

1.       Spec
updates:

 
Conformance cd-02a (Prateek) - http://lists.oasis-open.org/archives/security-services/200411/msg00123.html
     

Rob: Changes look okay to me. One typo needs to be fixed.

Scott: The column he added looks okay to him.

No other discussion.

 

2.      List comments

 
Typos in DSIG URI’s: http://lists.oasis-open.org/archives/security-services/200411/msg00120.html
     

Scott – will fix asap and post update.

 

 
Response to conformance comments: http://lists.oasis-open.org/archives/security-services/200411/msg00121.html
     

No discussion.

 

 
IPR Question: http://lists.oasis-open.org/archives/security-services/200411/msg00126.html 

Rob: We simply need to ensure that
OASIS IPR Policy and TC process are followed.

Steve: Will RSA make its statement
against SAML 2.0?

Rob: I’m not sure that is
necessary.  The previous claims still apply and are independent of the
version. 

Scott, Steve: Would like to have
RSA restate its IP claims for 2.0. So should AOL. 

Rob: I will look into getting an
RSA statement posted and will also follow up with Conor re: AOL.

General discussion re: other
claims at Liberty
site: We can’t require non-OASIS members to make declarations.  

Rob: I believe that, technically,
the only OASIS members that MUST make any statements re: IPR are those that
make input submissions to a TC and those that make attestations of
implementation.  These requirements have been satisfied (so far).

Rob: I will also follow up with
Jamie re: whether we can at least put a mention on the SSTC IPR page that other
claims may be present and refer folks to the Liberty site for additional info about
possible licensing requirements.

Greg, Scott – As mentioned
we just have to abide by the OASIS process. 

 

3.      Reminders: 

 
Attestations: We have 2
     (Entrust, Sun). We MUST have 3 before submitting by 15-Dec deadline.
     

 
Need comments on Paul’s
     Exec Overview: http://lists.oasis-open.org/archives/security-services/200411/msg00002.html
     

 
Need comments on Greg’s
     SAML 1.x metadata: http://lists.oasis-open.org/archives/security-services/200411/msg00012.html
     

 

Rob Philpott

Senior Consulting Engineer 

RSA Security Inc. 

Tel: 781-515-7115 

Mobile: 617-510-0893 

Fax: 781-515-7020 

mailto: