Attendance Mark Dave Andreas Donnal Duane Andrew Minutes Review Approved for November 19th Approved for November 26th Action Items: artf6072 still pending artf6006 closed as obsolete Review Comments: Secure Addressing Minor edits from Blair will be addressed as suggested. artf6093 Resolved Comment from Sven on SHOULD vs. MUST question on securing EPRs. Postpone action until PC. ACTION: Duane to mail Sven telling him the action and that he can raise it again in PC. Review Comments: Secure Communication Lines 152, 99, and 307 are just edits - will be done. Cypher suites: Agree with the comment and will clarify the text and change the names of the policy documents to include the SSL. AES_128 Issue: Preference for only one case in the document. ACTION Duane to ask Blair if 256 is really a problem. Password AuthN Issues: Agree with the comment and make it a MUST use secure channel in Usn/Pwd case = Change to a MUST. Allow both SSL and digested Pwds together = do nothing to the document. Sven's Comment: Certificate in the document Issue: The issue seems to be a corner case and it is up to the client to check the chain. The technology in this space is relatively mature and the area of the spec is not so central that legislating against poor implementation is necessary. No action on the document. Host name verification issue: Change the wording to "server identity verification". Typo will be fixed. Docs to be sent to the editor as this was the last call. Only the ASE_128 choice will be decided based on conversation with Blair. No further review needed. Need another call or F2F time for OGSA BSP 2.0. AOB: None -- Take care: Dr. David Snelling < David . Snelling . UK . Fujitsu . com > Fujitsu Laboratories of Europe Limited Hayes Park Central Hayes End Road Hayes, Middlesex UB4 8FE Reg. No. 4153469 +44-208-606-4649 (Office) +44-7768-807526 (Mobile)