Agenda: F2F Day 2, 14 May

Agenda: W3C XML Security WG (XMLSec) Day 2, 14 May
F2F 12-13 May 2009
RSA (EMC), Executive Briefing Center, 170 Middlesex Turnpike,
Bedford,  MA, USA
F2F #4

9-6 ET each day, arrival and setup at 8:30 am
Directions: http://www.rsa.com/node.aspx?id=1059

Information on meeting times in various time zones:
http://www.w3.org/2008/xmlsec/Group/Overview.html#phone

Zakim Bridge:
+1.617.761.6200 conference code 965732# ('XMLSEC')
IRC Chat:
irc.w3.org (port 6665), #xmlsec
Web-based IRC (member-only):
<http://cgi.w3.org/member-bin/irc/irc.cgi>

Please note that attendance of XMLSEC WG teleconferences is
restricted  to registered WG participants and persons invited by the
chair.

Logistics information:
http://lists.w3.org/Archives/Member/member-xmlsec/2009Mar/0015.html

Chair: Frederick Hirsch

Attendance information recorded via questionnaire see
http://www.w3.org/2002/09/wbs/42458/f2fbosrsa2009/results

In Person (10): Scott Cantor, Pratik Datta, Gerald Edgar, Phillip  
Hallam-Baker, Frederick Hirsch, Brian LaMacchia, Hal Lockhart, Sean  
Mullan, Magnus Nyström

By Phone (6) : Rob Miller, Bruce Rich, Thomas Roessler, Peter Saint- 
Andre, Ed Simon, Chris Solc

Regrets (3) :  Ken Graf, Shivaram Mysore, Kelvin Yiu

Tuesday 12 May 2009 (9:00 - 18:00 ET with setup at 8:30)

Wednesday 13 May 2009 (9:00 - 18:00 ET with setup at 8:30)

1) Welcome, Administrative (9:00 am)

1a) Scribe confirmation
13 May AM Brian
13 May PM Pratik
2 June Magnus

Scribe Instructions:
http://www.w3.org/2007/xmlsec/Group/Scribe-Instructions.html

1b) June Publication plan review

http://www.w3.org/2009/05/12-xmlsec-minutes.html#item04

Plan to agree on 2 June teleconference to publish updated 1.1  
specification working drafts, and others including
XML Signature 1.1, XML Encryption 1.1,  XML Security Algorithms Note,   
XML Security Derived Keys (with schema),
XML Signature Best Practices. Publication planned for 11 or 16 June.

Please complete action items related to these drafts and updates to  
editors drafts before 2 June teleconference. If updating XML Signature  
please update explain document as well.

1c) Elliptic curve resolution planned for 2 June

We also plan to have a resolution on 2 June teleconference related to  
XML SIgnature and XML Encryption to agree to remove notes regarding  
algorithm choice and continue to have the elliptic curve as required,  
in both. This can then be included in the publication of June.

1d) Last Call publication of 1.1

We plan to publish Last Call WD of XML Signature 1.1 and XML  
Encryption 1.1, along with change explanation documents in July.

2) Canonicalization options discussion (9:00 -10:30)

Which features of canonicalization can be removed or made optional as  
choices?

Review EXI as checklist:

http://www.w3.org/TR/exi/#fidelityOptions

3) Break (10:30 - 10:45)

4)  New Algorithm RFC review (10:45- 11:15)

ACTION-248 (Thomas)

http://lists.w3.org/Archives/Public/public-xmlsec/2009May/0023.html  
(draft, Thomas)

http://lists.w3.org/Archives/Public/public-xmlsec/2009May/0029.html  
(reference error?, Konrad)

5) Errata  (11:15 - 11:30)

5a) New exclusive C14N?

http://lists.w3.org/Archives/Public/public-xmlsec/2009May/0022.html  
(Scott)

6) XML Encryption Key Wrap description (11:30 - 12:00)

ACTION-270, Magnus

http://lists.w3.org/Archives/Public/public-xmlsec/2009May/0030.html

agree to update document?

7)  New key encryption (wrap) mechanism (KEM). (12:00 - 12:30)

Magnus

8)  Lunch (12:30 - 13:30)

9) Issues review (13:30 - 14:30)

http://www.w3.org/2008/xmlsec/track/issues/open

10) Action review (14:30 - 15:00 )

10a) Close Pending actions

[pending review] ACTION-274: Frederick Hirsch to Update best practices  
with proposal from Ken Graf, to call out local system access risks  
regarding XSLT - due 2009-05-12 [on ]
http://www.w3.org/2008/xmlsec/track/actions/274

[pending review] ACTION-275: Frederick Hirsch to Update Best Practices  
doc with Best practice on XPath Filter 2.0 preference, if available to  
1.0 implementation. - due 2009-05-12 [on ]
http://www.w3.org/2008/xmlsec/track/actions/275

10b) Open Action Review

Open actions are listed in Tracker at http://www.w3.org/2008/xmlsec/track/actions/open

Procedure for closing actions: http://www.w3.org/2007/xmlsec/Group/Overview.html#closing-actions

Please review open action list and update your actions appropriately:

http://www.w3.org/2008/xmlsec/actions-open.html

11) Break (15:00 - 15:15)

12) Use cases and requirements (15:15 - 15:45)
12a) Missing byte range use case and requirements?
http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0023.html  
(Chris)
12b) Other requirements updates?

13) Schema review and discussion (15:45 - 16:15)

14) Review of F2F decisions and actions (16:15 - 16:45)

15) Break (16:45 - 17:00)

16) Next steps, F2F planning, coordination (17:00 - 17:30)

16) Other Business (17:30 - 18:00)

17) Adjourn (18:00)

Scribing  list
----------------
Hal Lockhart, Oracle (9 December 2008)
Phillip Hallam-Baker, Verisign (F2F 13 January 2009, am)
Shivaram Mysore, Invited Expert ( F2F 14 January 2009, pm)
Brian LaMacchia, Microsoft ( F2F 14 January 2009, pm)
Bradley Hill, Invited Expert (27 January 2009)
Sean Mullan, Sun (3 February 2009)
Pratik Datta, Oracle ( F2F 14 January 2009, pm, 10 February 2009)
Konrad Lanz, IAIK (24 February 2009, 16 July F2F am)
Juan Carlos Cruellas, Universitat Politècnica de Catalunya (17
February 2009, 16 September 2008)
Chris Solc, Adobe (3 March 2009, 20 October 2008 F2F am)
Robert Miller, MITRE (10 March 2009, 20 October 2008 F2F pm)
Magnus Nyström, EMC (17 March 2009, 11 November 2008)
Scott Cantor, invited expert (24 March 2009, 29 July 2008, 2 December
2008)
Ed Simon, Invited Expert (31 March 2009, 18 November 2008)
Gerald Edgar, Boeing (7 April 2009, F2F 13 January 2009, pm)
John Wray, IBM (21 April 2009, 16 December 2008)
Kelvin Yiu, Microsoft (28 May 2009, 21 October 2008 F2F, pm)
Bruce Rich, IBM (planned 5 May 2009, 17 July F2F am, 21 October 2008
F2F am)

regards, Frederick

Frederick Hirsch, Nokia
Chair XML Security WG

Received on Wednesday, 13 May 2009 12:14:01 UTC