October 2005 - security-area

please review MyProxy protocol specification
by Jim Basney 17 Oct '05

17 Oct '05

Dear GGF Security Area members, At the GGF12 Security Area meeting, it was requested that I submit a specification of the MyProxy protocol to the GGF. I've now done so, and the document has entered a public comment period. I'd appreciate your comments on this short document. The deadline for public comments is November 14. GGF Public Comment page: http://www.ggf.org/ggf_docs_public.htm MyProxy Protocol document: http://www.ggf.org/Public_Comment_Docs/Documents/Oct-2005/draft-ggf-basney-… Forum for public comments: https://forge.gridforum.org/forum/forum.php?forum_id=570 Please submit comments using the GridForge URL above rather than replying to this message. Thanks, Jim > From: "Gregory Newby" <newby(a)arsc.edu> > Date: Mon, 10 Oct 2005 16:58:46 -0800 > To: wg-all(a)ggf.org > Subject: [wg-all] One new document in public comment > > One new document has entered public comment. > > Please visit this link to read the document, view public > comments, and make public comments. Public comments are a > very important part of the standards document process, and > your comments are valuable to authors in improving their > documents. > > Link: http://www.ggf.org/ggf_docs_public.htm > > This Experimental document is in 30-day public comment: > > Title: MyProxy Protocol version 2 > Author/editor: J. Basney > > Abstract: This document describes a protocol for storing and > retrieving X.509 proxy credentials [RFC3820] to and from a > server. The protocol uses proxy delegation [ProxyDelegation] to > transfer credentials without transferring private keys. > > > -- Greg Newby, GGF Editor

1 0

Date: Fri, 14 Oct 2005 08:06:13 -0500
by Von Welch 14 Oct '05

14 Oct '05

This CFP deadline has been extended to October 22nd. Von ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ CALL FOR PAPERS: ** Papers and Proposals Due: October 14, 2005 ** (see below for additional information) 5th Annual PKI R&D Workshop: Making PKI Easy to Use April 4-6, 2006 NIST -- Gaithersburg, MD Website: http://middleware.internet2.edu/pki06/ Registration Fee: $125.00 This workshop considers the full range of public key technology used for security decisions and supporting functionalities, including authentication, authorization, identity (syndication, federation, and aggregation), and trust. This year, the workshop has a particular interest in novel approaches to simplifying the use and management of X.509 digital certificates, both within and across enterprises. This workshop has three goals: 1. Explore the current state of public key technology and emerging trust mechanisms in different domains including web services; grid technologies; encryption functionality; authentication systems, et al., in academia, government and the private sector. 2. Share & discuss lessons learned and scenarios from vendors and practitioners on current deployments. 3. Provide a forum for leading security researchers to explore the issues relevant to the PKI space in areas of security management, identity, trust, policy, authentication, authorization and encryption (e.g., supporting privacy requirements). CALL FOR PAPERS: We solicit papers, case studies, panel proposals, and participation from researchers, systems architects, vendor engineers, and users. Submitted works should address one or more critical areas of inquiry. Topics include (but are not limited to): * Federated versus Non-Federated trust models * Standards related to PKI and security decision systems, such as X.509, SPKI/SDSI, PGP, XKMS, XACML, XRML, XML signatures and SAML * Cryptographic and alternative methods for supporting security decisions, including the characterization and encoding of data * Intersection of assertion-based systems and PKI * Human-Computer Interaction (HCI) advances that improve usability of PKI for users and administrators * Privacy protection and implications * Use of PKI in emerging technologies (i.e., sensor networks) * Scalability of security systems * Security of the components of PKI systems * Security infrastructures for constrained environments * Improved human factor designs for security-related interfaces including authorization and policy management, naming, use of multiple private keys, and selective disclosure * New paradigms in PKI architectures * Reports of real-world experience with the use and deployment of PKI, including the use of digital certificates with major off-the- shelf application programs, how best to integrate such usage into legacy systems, and future research directions. Deadlines for conference paper and panel submissions are: * Papers and Proposals: Due: October 14, 2005 * Authors Notified: December 2, 2005 * Final Materials Due: February 3, 2006 Submissions should be provided electronically, in PDF, for standard US letter-size paper (8.5 x 11 inches). Paper submissions must not exceed 15 pages (single space, two column format with 1" margins using a 10 pt or larger font) and have no header or footer text (e.g., no page numbers). Proposals for panels should be no longer than five pages and include possible panelists and an indication of which panelists have confirmed participation. Please submit the following information to pkichairs(a)internet2.edu: * Name, affiliation, email, phone, postal address for the primary contact author * First name, last name, and affiliation of each co-author * The finished paper in PDF format as an attachment All submissions will be acknowledged. Submissions of papers must not substantially duplicate work that any of the authors have published elsewhere or have submitted in parallel to any other conferences or journals. Accepted papers will be published in a proceedings of the workshop. REGISTRATION The registration fee of $125 per person includes workshop materials, coffee breaks, lunches, and a dinner. There will be no on-site registration. Please pre-register by March 17, 2006 at https:// rproxy.nist.gov/CRS/conf_ext.cfm?conf_id=1491 or by contacting: Teresa Vicente NIST Phone: (301) 975-3883 Fax: (301) 948-2067 email: teresa.vicente(a)nist.gov An agenda will be available in late December at http://middleware.internet2.edu/pki06/ ACCOMMODATIONS A block of rooms has been reserved at the Gaithersburg Hilton, (301) 977-8900, at a special rate of $109, single or double, plus 12% tax. Reservations must be received by March 17, 2006, in order to receive the special rate. Please mention you are attending the "NIST/PKI Workshop".

1 0

Slides from Monday are on-line
by Von Welch 05 Oct '05

05 Oct '05

With many thanks to the GGF webmaster, the slides from the "Leveraging Site Infrastructute for Multi-Site Grids" Community Activity are now all posted: http://www.ggf.org/GGF15/ggf_events_schedule_MultiSite.htm Von

1 0

Important: Security area meeting and BOF have been rescheduled
by Olle Mulmo 05 Oct '05

05 Oct '05

All, - The security area meeting will take place on THURSDAY at 11:00, replacing the Middleware Security BOF (room Whittier) - The Middleware Security BOF will move on WEDNESDAY at 12:30, i.e. during lunch (room St James). Go pick up your lunch bag prior to the meeting starts. See you around, /Olle

3 2