SSTC Conference Call Agenda - 2 October 2001

["PATO,JOE (HP-PaloAlto,ex1)" <joe_pato@hp.com>]

SSTC Agenda

1 - Roll Call

2 - Agenda review

3 - Approve Minutes 18 September 2001
See <
http://lists.oasis-open.org/archives/security-services/200109/msg00057.html
>

4 - Acknowledge completed action items:
See <
http://lists.oasis-open.org/archives/security-services/200109/msg00060.html
>
ratify closure of action items as a group.

5 - Face to face #5
    When?
    Where?
    Volunteers to host?

6 - Project Liberty
    Current Status with regard to SAML

7 - Action Items that must be addressed in committee (rather than as part of
Focus group later)

8 - Adjourn


Focus Group Discussion:

ACTION items
============
 
ACTION: Prateek to start traceability review before the next TC telecon
using discussion-01 docs and going back to use cases"

Status: Action Item (AI) remains open in wait state. 


------
ACTION: Marlena to champion DS-1-02, Anonymity Technique 

Status: AI still open. (tho Marlena expressed during open discussion below
that she may not wish to pursue this further). 


------
ACTION: Krishna to drive SAML profile of xmldsig.
[has sent msg to the list soliciting input..
<
http://lists.oasis-open.org/archives/security-services/200109/msg00046.html
>

Status: in progress

------
ACTION: Bob B & Marlena: <Subject> in Core doc to correspond to Artifact.

Status: remains open


------
ACTION: JeffH to transfer sec consideration work to Chris.

Status: in progress. 


------
ACTION: Don: Smart client profile - develop a proposal. 

Status: posted 1 Oct.


------
ACTION: Don: to elaborate the number of 1-1 relationships and propose how to
fix the resulting scaling issues. 

Status: to be sent out to list by Mon 24-Sep

------
ACTION: Gil: [DS-6-01:Nested Attributes] Not sure how SAML could address
this [revisit at next call]

Status: in progress, gil in hiatus.


------
ACTION: Prateek: To make a proposal on the mandatory use of HTTPS [was
Gil's; Report back by Fri 28-Sep]

Status: On mailing list

------
ACTION: Irving: Multiple NameIdentifiers are dangerous - Irving to write up
proposal.

Status: in progress. will shoot for 28-Sep Fri. 

------
ACTION: Phill: Will produce a core-16 that just contains the notational and
twiddles before any major changes to schema and protocols.

Status: Core 19 out 1 Oct.

------
ACTION: Prateek: "Security properties of Assertion Handle" 

Status: in progress.


------
ACTION: Prateek: Lookup by artifact: Agreed that he should submit a detailed
proposal to the Core outlining specific changes to specific sections.
Includes new request-response protocol not currently defined in HTTP
binding.

Status: in progress. 


------
ACTION: Prateek: Oracle attacks WRT SOAP Profile

Status: in progress.


------
ACTION: Prateek: Should the Bindings Group select either the HTTP or SOAP
protocol bindings for inclusion in the final spec?

Status: in discussion on mailing list.

------
ACTION: Prateek: Should the SOAP binding address the issue of intermediaries
- generate proposal for how

Status: in progress.

------
ACTION: Prateek: This is an editorial issue about the names of profiles.
Prateek to revise current document. (single sign on terminology)

Status: in progress. 


------
ACTION: prateek: pseudonym or somewhat anonymous subject identifiers

Status: in progress.