Agenda: WSC WG distributed meeting, Wednesday, 2007-10-24

Web Security Context (WSC) Call Agenda

Calling information:
Wednesday, 24 October 2007
11:00 am - 12:30 pm Eastern time
http://www.w3.org/2006/WSC/Group/#meetings


Agenda

1) Pick a scribe
Christian's on deck
http://www.w3.org/2006/WSC/Group/cheatsheet#Scribing
http://www.w3.org/2006/WSC/scribes


2. Approve mintues from meetings
http://www.w3.org/2007/10/02-wsc-minutes.html
http://www.w3.org/2007/10/03-wsc-minutes.html
http://www.w3.org/2007/10/10-wsc-minutes

3) Newly completed action items
// no time this week

4) Open Action Items
// no time this week

5) Action items closed due to inactivity 
// no time this week

6) Agenda bashing

7) ISSUE-128 Strong / weak algorithms?
http://www.w3.org/2006/WSC/track/issues/128
http://www.w3.org/2006/WSC/drafts/rec/rewrite.html#strong-algos
Suggestions on the table include
Voicing the need for an international standard on recommended cipher 
suites for administrators and user agent developers (perhaps from IETF or 
ENCRYPT)
Referencing the most up to date standards (such as TLS)
Discourage specific suites (anonymous and authentication only, for 
example) 
Point to FIPS 140-2, or the NIST guidelines on TLS (SP800-52)

8) TAG on passwords in the clear 
We're meeting with the TAG on this issue. Let's discuss it so that we're 
prepared for the TPAC meeting
http://lists.w3.org/Archives/Public/public-wsc-wg/2007Oct/0027.html

9) Dealing with comments on our documents
http://www.w3.org/2006/WSC/track/actions/274
We need better process and support for responding to comments. Bill and I 
will talk about what we have so far, and Bill and Thomas will talk about 
lc-tracker. 

9) Next meeting - October 31
I'm beginning to mine open issues more rigorously for agenda items. Expect 
that trend to continue.