Fw: WSS-TC: Minutes, XVI.NOV.04

OASIS Web Services Security Meeting
- 

Date:  Tuesday, 16 November 2004

Time:  07:00am - 09:00am Pacific Time

Event Description:

Bi-weekly WSS TC call

+1 (734)414-0268

access code: 402049

Our thanks to BEA Systems for sponsoring this call

Agenda:

1. Call to order, roll call 

9:04 AM CST

Quorum Achieved

2. Reading/approving minutes of last meeting (2nd
November 2004) [1] 

Without objection, meetings approved

3. Quick discussion of remaining meetings for 2004
(please read [2])

Without objection, December 28th, 2004 Meeting Cancelled

4. Standard submission status

Hal said that vote had gone off as of 11/15.

5. Errata status and 1.1 draft status

Tony: Incorporating approved changes

6. Other document status (SwA, Kerberos)

7. Issue list review 

84: Encryption Transform. Hal Lockhart asserted that
as a feature it has no general use cases, and that this feature adds complexity
without benefit, and therefore should be eliminated. The beneficial cases
are improbable.

Allows sender to say what was encrypted, and when.

Hal: Existing mechanisms solve problem without ambiguity.

Someone - Not closed on this item

Record: Action on Mike to respond to Hal's eMail before
next call.

282: Password based key derivation (in username token
profile)

Been reviewed for 1.1, marked pending

Action: TC to review

298: Issuer Serial Status - update posted

Action: TC to review

309: 

Action: Editors to incorporate, review pending

310: Hal key identifier with ski: Resolution: you
can make multiple key references.

Ron Monzillo: Implies you can use a thumbprint.

Action: Ron to review

315: Dana Kaufman: PKI Examples, Tony posted updates
in 1.1

Action: TC to review in 1.1 Errata

317: Encrypted Header: 

Action: Hal to review and respond

318:

Action: 1.1 Review

319:

Action: pending review

330:

Action: pending changes from editors

331:

Action:

TC: Pending Review status to be added for documents
"pending review"

334:

Action: Editors integrate Ron's Text into 1.1 document

339:

Action: to be marked closed (PKI Path)

Open Issues:

263: Open Enumeration

Action: Gudge to send email to get response

Thomas proposing it be dropped

Mike proposing it be accepted

Without objection: To be marked closed - TC decided
not worth effort to clean-up in 1.1

331 & 332: Edits on message security

Action: Typos, Pending - to be fixed in errata

338: Proposed

Action: Reviewed for next couple of weeks

340: From Blake - WsA Interop Issues

Action: Marked pending review

341: Lose content transfer encoding in SWA

Action: Review 

Frederick doesn't understand if change as is correct.
TC decided to leave CTI out of profile if possible. Doesn't understand
if this change violates the principle.

342: Pending review on current draft

Action: 4.5.2 Item number 4 - should be associated
with pending issue 342

343:

Action: Leave pending review, request more TC feedback,
close on next call if no issue, specify CID references.

Issue List Discussion closed

8. Interop planning status (SwA2, Kerberos) 

Action: TC to Send email on Kerberos to list

9. Other business 

Kelvin created new calendar entries for 2005.

Attendee Pickups.

10. Adjournment 

Closed 1025 CST

Attendance of Voting Members

 

  Gene Thurston AmberPoint

  Hal Lockhart BEA

  Corinna Witt BEA

  Thomas DeMartini ContentGuard

  Guillermo Lao ContentGuard

  Merlin Hughes Cybertrust

  Sam Wei Documentum

  Tim Moses Entrust

  Dana Kaufman Forum Systems

  Kefeng Chen GeoTrust

  Kojiro Nakayama Hitachi

  Paula Austel IBM

  Derek Fu IBM

  Maryann Hondo IBM

  Kelvin Lawrence IBM

  Mike McIntosh IBM

  Anthony Nadalin IBM

  Ron Williams IBM

  Kate Cherry Lockheed Martin

  Paul Cotton Microsoft

  Chris Kaler Microsoft

  Richard Levinson Netegrity

  Prateek Mishra Netegrity

  Frederick Hirsch Nokia

  Abbie Barbir Nortel

  Lloyd Burch Novell

  Steve Anderson OpenNetwork

  Vamsi Motukuru Oracle

  Ben Hammond RSA Security

  Martijn de Boer SAP

  Blake Dournaee Sarvega

  Coumara Radja Sarvega

  Pete Wenzel SeeBeyond

  Jeff Hodges Sun Microsystems

  Ronald Monzillo Sun Microsystems

  Jan Alexander Systinet

  Symon Chang TIBCO

  John Weiland US Navy

  Maneesh Sahu Westbridge Technology

 

Attendance of Prospective Members and Observers

 

  Martin Gudgin Microsoft

  Carolina Canales-Valenzuela Ericsson

  Nataraj Nagaratnam IBM

  Don Flinn Individual

 

 

Membership Status Changes

 

  Carolina Canales-Valenzuela Ericsson
- Requested membership 11/2/2004

  Irving Reid Hewlett-Packard Company
- LOA 11/3/2004 through 12/18/2004

  Nataraj Nagaratnam IBM - Requested
membership 11/4/2004

  Michael Petkevich BMC - Requested
membership 11/6/2004

  Andrew Nash RSA Security - Lost voting
status after 11/16/2004

  Martin Gudgin Microsoft - Granted
voting status after 11/16/2004 call

  Ramanathan Krishnamurthy IONA - Granted
voting status after 11/16/2004 call

Cheers!

_________________________________________________________________________________________________________

ron williams   sr enterprise architect   ibm software group
   tivoli security  vox +1.512.838.0073  cell +1.512.633.7711
S/MIME Cryptographic Signature