Agenda: Distributed meeting 2008-12-09

Agenda: W3C XML Security WG (XMLSec)
Teleconference 9 December 2008
Distributed Meeting #14

10-12:00 am Eastern Time
Information on meeting times in various time zones:
http://www.w3.org/2008/xmlsec/Group/Overview.html#phone

Zakim Bridge:
+1.617.761.6200 conference code 965732# ('XMLSEC')
IRC Chat:
irc.w3.org (port 6665), #xmlsec
Web-based IRC (member-only):
<http://cgi.w3.org/member-bin/irc/irc.cgi>

Please note that attendance of XMLSEC WG teleconferences is restricted  
to registered WG participants and persons invited by the chair.

Chair: Frederick Hirsch

Regrets:  Konrad Lanz

see http://www.w3.org/2008/xmlsec/Group/Overview.html#upcoming-meetings

1) Administrivia: scribe confirmation, next meeting, other

1a)  Hal Lockhart is scheduled to scribe

The current scribe list is at the end of this message, will rotate  
through this list.

Scribe Instructions:
http://www.w3.org/2007/xmlsec/Group/Scribe-Instructions.html

1b)   Meeting planning: weekly meetings

This WG meets weekly on Tuesdays 10-12 Eastern unless a meeting is  
cancelled.

Upcoming meeting information is available on the WG Administrative page:
http://www.w3.org/2008/xmlsec/Group/Overview.html#upcoming-meetings

Next meeting 16 December John Wray is scheduled to scribe.

23 December, 30 December 2008 Teleconferences have been cancelled

F2F 13-14 January
Logistics
http://lists.w3.org/Archives/Member/member-xmlsec/2008Nov/0035.html  
(Pratik)

Please complete registration questionnaire
http://www.w3.org/2002/09/wbs/42458/xmlsecredwood0109/

Remember travel arrangements.

1c) Liaisons and Coordination

See status at members page
http://www.w3.org/2008/xmlsec/Group/Overview.html#coordination

Draft Errata for WS-Policy Framework Recommendation and Primer Note  
(Frederick)
http://lists.w3.org/Archives/Public/public-ws-policy/2008Nov/0002.html

1d) Announcements

NIST requests public comments on revision of FIPS 186-3 (DSS) (Thomas)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0053.html

2) Minutes Approval

2a) Minutes from 2 December 2008 for approval:

http://lists.w3.org/Archives/Member/member-xmlsec/2008Dec/0002.html

(need to be moved to official location)

3) Issues

No new issues.

4) Editorial updates

4a) Best Practices Editors Draft  (Frederick)

default schema value and certificate encoding
http://lists.w3.org/Archives/Member/member-xmlsec/2008Dec/0004.html

4b) 1.1 Signature Editors Draft  (Frederick)

Section 4.4.4 regarding certificate encoding, affiliations, typos,  
status section
http://lists.w3.org/Archives/Member/member-xmlsec/2008Dec/0005.html

fixed ISSUE-50 typo
http://lists.w3.org/Archives/Member/member-xmlsec/2008Dec/0008.html

Need help with diff against 2nd edition

4c) Requirements draft

web services security, reference to transforms note (Frederick)
http://lists.w3.org/Archives/Member/member-xmlsec/2008Dec/0007.html

4d) New Home page posted

Various validation and link fixes, please review. Needs links to test  
cases added.

http://lists.w3.org/Archives/Public/public-xmlsec/2008Dec/0005.html

5) Roadmap

5a) Add XML Encryption revision to 1.1

Algorithms for XML Encryption 1.1

ACTION-121, Kelvin

5b) Updated roadmap draft (Frederick)

Please review and comment

http://www.w3.org/2008/xmlsec/Drafts/roadmap/roadmap.html

5c) Separate document for Derived Keys, publish with 1.1?
1.1 Draft

6) 1.1 Signature

6a) Decision: Introduce separate generation and validation  
requirements for  DSAwithSHA1?

http://lists.w3.org/Archives/Public/public-xmlsec/2008Dec/0002.html  
(Brian)

6b) Decision, status of HMAC-SHA256 (ISSUE-74)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Dec/0004.html  
(Kelvin)

Status of versioning text, references

7) Requirements

7a) Are streaming requirements adequately documented?

7b) Long Term Signatures

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0006.html  
(Juan Carlos)

7c) Requirement for non-XML canonicalization?

ISSUE-38

8) Best Practices

8a) Timestamp references

Is this issue closed? ISSUE-56

9) Action Item and Issue Review

9a) Close Pending actions
[pending review] ACTION-94: Kelvin Yiu to Provide draft note on new  
algorithms for 1.1 - due 2008-10-28 [on Rqmts (XML Signature and  
Canonicalization V Next Requirements)]
http://www.w3.org/2008/xmlsec/track/actions/94

[pending review] ACTION-111: Frederick Hirsch to Add default attribute  
language to Best Practices doc - due 2008-12-09 [on ]
http://www.w3.org/2008/xmlsec/track/actions/111

[pending review] ACTION-116: Frederick Hirsch to Add approved  
certificate encoding text to drafts - due 2008-12-09 [on ]
http://www.w3.org/2008/xmlsec/track/actions/116

[pending review] ACTION-118: Frederick Hirsch to Add web services text  
from Hal to Requirements draft - due 2008-12-09 [on ]
http://www.w3.org/2008/xmlsec/track/actions/118

[pending review] ACTION-119: Frederick Hirsch to Add pointer to  
Transforms note to Requirements draft - due 2008-12-09 [on ]
http://www.w3.org/2008/xmlsec/track/actions/119

[pending review] ACTION-120: Kelvin Yiu to Review SP 800-57 for HMAC- 
SHA256 item - due 2008-12-09 [on ]
http://www.w3.org/2008/xmlsec/track/actions/120


9b) Open Action Review

Open actions are listed in Tracker at http://www.w3.org/2008/xmlsec/track/actions/open

Procedure for closing actions: http://www.w3.org/2007/xmlsec/Group/Overview.html#closing-actions

Please review open action list and update your actions appropriately:

http://www.w3.org/2008/xmlsec/actions-open.html

10) Best Practices (Deferred)

10a) Comments from Juan Carlos (Deferred)

http://www.w3.org/2008/xmlsec/Drafts/best-practices/comments-bhill-jcc.html 
  (Edited document)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Oct/0020.html  
(Frederick)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Oct/0030.html  
(Juan Carlos)

11) Other Business

12) Adjourn

Scribing  list (to be updated)
----------------
John Wray, IBM ()
Konrad Lanz, IAIK (16 July F2F am)
Hal Lockhart, Oracle (16 July F2F pm)
Sean Mullan, Sun (12 August 2008)
Pratik Datta, Oracle (19 August 2008)
Subramanian Chidambaram, Nokia (26 August)
Brian LaMacchia, Microsoft (2 September 2008)
Bradley Hill, Invited Expert (9 September 2008)
Juan Carlos Cruellas, Universitat Politècnica de Catalunya (16  
September 2008)
Gerald Edgar, Boeing (7 October 2008)
Chris Solc, Adobe (20 October 2008 F2F am)
Robert Miller, MITRE (20 October 2008 F2F pm)
Bruce Rich, IBM (17 July F2F am, 21 October 2008 F2F am)
Kelvin Yiu, Microsoft (21 October 2008 F2F, pm)
Shivaram Mysore, Invited Expert (4 November 2008)
Magnus Nyström, EMC (11 November 2008)
Ed Simon, Invited Expert (18 November 2008)
Scott Cantor, invited expert (29 July 2008, 3 December 2008)

regards, Frederick

Frederick Hirsch, Nokia
Chair XML Security WG