Agenda: Distributed meeting 2008-12-02 v3

Agenda: W3C XML Security WG (XMLSec) v3
Teleconference 2 December 2008
Distributed Meeting #13

v2: update regrets, add proposals and discussion items sent to list,  
update re web page, upcoming meetings, scribing

v3 add link to f2f registration questionnaire, minutes correction,  
update regrets, re-order agenda

10-12:00 am Eastern Time
Information on meeting times in various time zones:
http://www.w3.org/2008/xmlsec/Group/Overview.html#phone

Zakim Bridge:
+1.617.761.6200 conference code 965732# ('XMLSEC')
IRC Chat:
irc.w3.org (port 6665), #xmlsec
Web-based IRC (member-only):
<http://cgi.w3.org/member-bin/irc/irc.cgi>

Please note that attendance of XMLSEC WG teleconferences is restricted  
to registered WG participants and persons invited by the chair.

Chair: Frederick Hirsch

Regrets:  Juan Carlos Cruellas, Konrad Lanz, Ed Simon

see http://www.w3.org/2008/xmlsec/Group/Overview.html#upcoming-meetings

1) Administrivia: scribe confirmation, next meeting, other

1a)  Scott Cantor is scheduled to scribe

The current scribe list is at the end of this message, will rotate  
through this list.

Scribe Instructions:
http://www.w3.org/2007/xmlsec/Group/Scribe-Instructions.html

1b)   Meeting planning: weekly meetings

This WG meets weekly on Tuesdays 10-12 Eastern unless a meeting is  
cancelled.

Upcoming meeting information is available on the WG Administrative page:
http://www.w3.org/2008/xmlsec/Group/Overview.html#upcoming-meetings

23 December, 30 December 2008 Teleconferences have been cancelled

Next meeting 9 December, Hal Lockhart is scheduled to scribe.
16 December John Wray is scheduled to scribe.

F2F 13-14 January
Logistics
http://lists.w3.org/Archives/Member/member-xmlsec/2008Nov/0035.html  
(Pratik)

Please complete registration questionnaire
http://www.w3.org/2002/09/wbs/42458/xmlsecredwood0109/

Remember travel arrangements.

1c) Liaisons and Coordination

See status at members page
http://www.w3.org/2008/xmlsec/Group/Overview.html#coordination

Draft Errata for WS-Policy Framework Recommendation and Primer Note  
(Frederick)
http://lists.w3.org/Archives/Public/public-ws-policy/2008Nov/0002.html

1d) Announcements

NIST requests public comments on revision of FIPS 186-3 (DSS) (Thomas)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0053.html

2) Minutes Approval

2a) Minutes from 18 November 2008 for approval:

http://www.w3.org/2008/11/18-xmlsec-minutes

to incorporate the following corrections:
+ Add Pratik Datta to list of regrets

3) Issues

No new issues.

ISSUE-72 closed, requirement for DTD solved (up to WG, though preferred)

4) Best Practices -  Default attributes in XML Signature

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0054.html  
(Magnus)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0055.html  
(Sean)

5) 1.1 Draft

5a) Draft update - Algorithms (Kelvin)

Please review

http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/Overview.htm

http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/xmldsig-ecc.xsd

http://www.w3.org/2008/xmlsec/Drafts/xmldsig-core-11/Overview_diff.htm

Still require DSAwithSHA1? (Frederick)
http://lists.w3.org/Archives/Public/public-xmlsec/2008Dec/0000.html

http://lists.w3.org/Archives/Public/public-xmlsec/2008Dec/0002.html  
(Brian)

Feedback from IETF (Magnus)
http://lists.w3.org/Archives/Member/member-xmlsec/2008Dec/0001.html

5b) Versioning note (Thomas)

5c) Update References

5d) KeyInfo and Certificate Encoding

5e) Publication plan - First Public Working Draft in this month or  
January?

5f) Confirm - Transform Simplification part of 2.0

6) Certificate encoding update, v1.1 and Best Practices (Scott)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0050.html

7) Public Web site update

7a) Link to comments list, announce best practices publication (Thomas)

http://lists.w3.org/Archives/Member/member-xmlsec/2008Nov/0034.html

7b) Updated public page (Shivaram)

http://lists.w3.org/Archives/Member/member-xmlsec/2008Nov/0033.html

8) Improvements to XML Signature schema (Scott)

ISSUE-43, http://www.w3.org/2008/xmlsec/track/issues/43

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0049.html  
(Scott)

9) Requirements

9a) Draft updated

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0044.html  
(Frederick)

9b) Add requirements related to web services

http://lists.w3.org/Archives/Public/public-xmlsec/2008Sep/0036.html  
(Hal)

9c) Requirements related to streaming

Add section with link to transforms document.

http://www.w3.org/2008/xmlsec/Drafts/transform-note/Overview.html

Review and discussion of transforms document - comment, changes?

9d) Signature Metadata Requirements

ISSUE-32, http://www.w3.org/2008/xmlsec/track/issues/32

Which metadata should be conveyed with signature? How?
Examples: Profile level, version, other?
Separate from long-term signatures

9e) Whitespace requirements/simplification

TBD

10) Profiling XPath for simplification

Review options and proposals

11) Action Item Review

11a) Close Pending actions
[pending review] ACTION-24: Scott Cantor to Review schema for  
improvements - due 2008-11-30 [on ISSUE-43]
http://www.w3.org/2008/xmlsec/track/actions/24


[pending review] ACTION-87: Thomas Roessler to Add link to comment  
list to public page - due 2008-11-30 [on WG-Web Site]
http://www.w3.org/2008/xmlsec/track/actions/87


[pending review] ACTION-96: Thomas Roessler to Send kelvin information  
about editing tools - due 2008-11-30 [on WG-Tools]
http://www.w3.org/2008/xmlsec/track/actions/96


[pending review] ACTION-108: Scott Cantor to Provide Proposal re  
Consolidated Certificate Encoding Proposal - due 2008-11-25 [on ]
http://www.w3.org/2008/xmlsec/track/actions/108


[pending review] ACTION-109: Frederick Hirsch to Add Magnus' work to  
Requirements Document - due 2008-11-25 [on ]
http://www.w3.org/2008/xmlsec/track/actions/109


11b) Open Action Review

Open actions are listed in Tracker at http://www.w3.org/2008/xmlsec/track/actions/open

Procedure for closing actions: http://www.w3.org/2007/xmlsec/Group/Overview.html#closing-actions

Please review open action list and update your actions appropriately:

http://www.w3.org/2008/xmlsec/actions-open.html

12) Best Practices (Deferred)

12a) Comments from Juan Carlos (Deferred)

http://www.w3.org/2008/xmlsec/Drafts/best-practices/comments-bhill-jcc.html 
  (Edited document)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Oct/0020.html  
(Frederick)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Oct/0030.html  
(Juan Carlos)

13) Requirements  (Deferred)

13a) Long Term Signatures (Deferred)

http://lists.w3.org/Archives/Public/public-xmlsec/2008Nov/0006.html  
(Juan Carlos)

14) Other Business

15) Adjourn

Scribing  list (to be updated)
----------------
John Wray, IBM ()
Konrad Lanz, IAIK (16 July F2F am)
Hal Lockhart, Oracle (16 July F2F pm)
Scott Cantor, invited expert (29 July 2008)
Sean Mullan, Sun (12 August 2008)
Pratik Datta, Oracle (19 August 2008)
Subramanian Chidambaram, Nokia (26 August)
Brian LaMacchia, Microsoft (2 September 2008)
Bradley Hill, Invited Expert (9 September 2008)
Juan Carlos Cruellas, Universitat Politècnica de Catalunya (16  
September 2008)
Gerald Edgar, Boeing (7 October 2008)
Chris Solc, Adobe (20 October 2008 F2F am)
Robert Miller, MITRE (20 October 2008 F2F pm)
Bruce Rich, IBM (17 July F2F am, 21 October 2008 F2F am)
Kelvin Yiu, Microsoft (21 October 2008 F2F, pm)
Shivaram Mysore, Invited Expert (4 November 2008)
Magnus Nyström, EMC (11 November 2008)
Ed Simon, Invited Expert (18 November 2008)

regards, Frederick

Frederick Hirsch, Nokia
Chair XML Security WG