Agenda: Distributed Meeting 2009-09-29

Agenda: W3C XML Security WG (XMLSec)
Teleconference 29 September 2009
Distributed Meeting #43

10-12:00 am Eastern Time
Information on meeting times in various time zones:
http://www.w3.org/2008/xmlsec/Group/Overview.html#phone

Zakim Bridge:
+1.617.761.6200 conference code 965732# ('XMLSEC')
IRC Chat:
irc.w3.org (port 6665), #xmlsec
Web-based IRC (member-only):
<http://cgi.w3.org/member-bin/irc/irc.cgi>

Please note that attendance of XMLSEC WG teleconferences is   
restricted  to registered WG participants and persons invited by the   
chair.

Publication Status available at
http://www.w3.org/2008/xmlsec/wiki/PublicationStatus

Chair: Frederick Hirsch

Regrets: Scott Cantor, Bruce Rich, Thomas Roessler

see http://www.w3.org/2008/xmlsec/Group/Overview.html#upcoming-meetings

1) Administrivia: scribe confirmation, next meeting, other

1a)  Gerald Edgar is scheduled to scribe

The current scribe list is at the end of this message, will rotate  
through this list.

Scribe Instructions:
http://www.w3.org/2007/xmlsec/Group/Scribe-Instructions.html

1b)   Meeting planning: upcoming meetings

This WG meets weekly on Tuesdays 10-12 Eastern unless a meeting is  
cancelled.

Upcoming meeting information is available on the WG Administrative page:
http://www.w3.org/2008/xmlsec/Group/Overview.html#upcoming-meetings

Next meeting:  29 September 2009, scribe TBD

Important: F2F at TPAC 5-6 November

For information, WG questionnaire, and registration information see http://www.w3.org/2008/xmlsec/Group/Overview.html#upcoming-f2f

1c) Liaisons and Coordination

See status at members page
http://www.w3.org/2008/xmlsec/Group/Overview.html#coordination

Widget Signature Testing, request for review
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0025.html

1d) Announcements

Another tool for specification writing - ReSpec.js

http://dev.w3.org/2009/dap/ReSpec.js/documentation.html

Using XMLSpy with xmlspec
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0038.html

2) Minutes Approval

Please review minutes, also please indicate corrections in attendance.

22 September 2009 teleconference

http://www.w3.org/2009/09/22-xmlsec-minutes.html

3) Editorial Updates

3a) XML Signature 1.1
ACTION-360: update XML Signature scheme to add use="required" for URI  
attr on NamedCurve (Brian)
3b) Canonical XML 2.0
Editorial updates, shortname update
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0035.html
3c) XML Signature 2.0
Editorial updates, shortname update
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0035.html

3d) Editing tools

Another tool for specification writing - ReSpec.js

http://dev.w3.org/2009/dap/ReSpec.js/documentation.html

Using XMLSpy with xmlspec
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0038.html

4) Decision to publish Canonical XML 2.0 and XML Signature 2.0 as FPWD  
on 6 October

4a) Approve shortnames

xml-c14n2
xmldsig-core2

http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0032.html  
(Thomas)

4b) Agree to publish FPWD of Canonical XML 2.0 and XML Signature 2.0  
on 6 October

4c) Other documents to publish at this time

any?

5) Resolve remaining 1.1 Issues

(apart from ISSUE-91, mandatory ECC)

5a) General

ISSUE-124
Does w3c support conformance clauses for specification and minimum  
conformance levels, how to do properly

ISSUE-100 Ripe URIs, resolved?
resolved with content of XML Security Algorithm Cross-Reference
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0039.html

5b) XML Signature 1.1

ISSUE-82
Should 1.1 spec mandate support for range of RSA key sizes (and DSA)?

ISSUE-121 Provide recommendation regarding key length for signature a  
la widget signature, either in signature 1.1 or best practices

5c) XML Encryption 1.1

ISSUE-125
Add C14N1.1 to the list of canonicalization algorithms in Section 5.9  
of XMLENC

ISSUE-135 Review transforms for encryption

Clarification and proposal to close
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0044.html  
(Frederick)

ISSUE-137
Normative reference to DRAFT-HOUSLEY-KW-PAD

5d) any other XML Signature 1.1 or XML Encryption 1.1 issues to  
resolve before last call?

6) 1.1 Interop

http://www.w3.org/2008/xmlsec/wiki/Interop

Next step planning and request for volunteers to produce test cases.

7) 1.1. Last Call

Planning for Last Call of 1.1

http://www.w3.org/2005/10/Process-20051014/tr#last-call

Include XML Signature 1.1, XML Encryption 1.1, XML Security Generic  
Hybrid Ciphers,  XML Signature Properties

Also publish an update to XML Security Algorithms Cross-Reference at  
that time.

8) Errata

Proposal related to ACTION-297, ACTION-298 and ACTION-320
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0006.html    
(Konrad)

9) 2.0 Review status and discussion

http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0040.html  
(Ed Simon)

http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0042.html  
(Scott Cantor)

10) Action review

10a) Close Pending actions

These will be closed after the meeting unless concern raised before or  
during meeting. Please review in advance of meeting.

ACTION-372: Ed Simon to Create an issue for the discussion in email

10b) Open Action Review

Open actions are listed in Tracker at http://www.w3.org/2008/xmlsec/track/actions/open

Procedure for closing actions: http://www.w3.org/2007/xmlsec/Group/Overview.html#closing-actions

Please review open action list and update your actions appropriately:

http://www.w3.org/2008/xmlsec/actions-open.html

11) Issue review

http://www.w3.org/2008/xmlsec/track/issues/open

New issue
http://lists.w3.org/Archives/Public/public-xmlsec/2009Sep/0041.html  
(Ed Simon)

12) Other Business

13) Adjourn

Scribing  list
----------------
Konrad Lanz, IAIK (24 February 2009, 16 July F2F am)
Juan Carlos Cruellas, Universitat Politècnica de Catalunya (17  
February 2009, 16 September 2008)
Bruce Rich, IBM (5 May 2009)
Sean Mullan, Sun (12 May 2009 F2F am)
Gerald Edgar, Boeing (12 May 2009 F2F pm, 7 April 2009)
Brian LaMacchia, Microsoft (13 May 2009 F2F am)
Pratik Datta, Oracle (13 May 2009 F2F pm)
Magnus Nyström, EMC (2 June, 2009, 24 March 2009)
Hal Lockhart, Oracle (16 June 2009, 9 December 2008)
Shivaram Mysore, Invited Expert (23 June 2009,  F2F 14 January 2009, pm)
Cynthia Martin, MITRE (7 July 2009, 9 June 2009)
Bradley Hill, Invited Expert (14 July 2009, 27 January 2009)
Chris Solc, Adobe (21 July 2009, 3 March 2009)
Thomas Roessler/Ed Simon, Invited Expert (11 August 2009, 31 March 2009)
John Wray, IBM (1 Sept 2009, 21 April 2009)
Scott Cantor, invited expert (8 Sept 2009, 28 July 2009, 24 March 2009)
Kelvin Yiu, Microsoft (22 Sept 2009)

regards, Frederick

Frederick Hirsch, Nokia
Chair XML Security WG