-----Original Message----- From: Dane Skow [mailto:dane@fnal.gov] Sent: Thursday, March 17, 2005 6:03 PM To: security-area@ggf.org Cc: Ian Foster; Hiro Kishimoto Subject: Update on OGSA Basic Profile Security work =20 As Frank mentioned in the Security Area Meeting, the OGSA Basic = Profile is now being worked intensely toward conclusion. The Working Group has set a goal of mid April for resolving all the open issues with the current draft. = The majority of the new issues opened this meeting have to do with security. Takuya = has asked for a week to allow the interested parties in the Security Area to read =

------- start of forwarded message ------- From: "Hiro Kishimoto" <hiro.kishimoto@jp.fujitsu.com> To: "'Dane Skow'" <dane@fnal.gov>, <security-area@ggf.org> Cc: "'Ian Foster'" <foster@mcs.anl.gov>, "'ogsa-wg'" <ogsa-wg@gridforum.org> Subject: RE: Update on OGSA Basic Profile Security work Date: Wed, 23 Mar 2005 16:43:47 +0900 Message-ID: <00e301c52f7c$0c60ae40$63e61fac@ORD> Thanks Dane for your obliging email, Certainly OGSA-WG welcomes and requires security experts. Proposed telecon date is March 30th. If it does not work for=20 you, April 6th is another option. Please let me know your=20 preference. You can subscribe our mailing list; https://forge.gridforum.org/projects/sourceforge/document/majordomo_help/= en/1/ma jordomo_help.doc http://www-unix.gridforum.org/mail_archive/ogsa-wg/threads.html Our Wednesday call is 5-7pm CST. The dial in number is 1-888-452-0308 or 1-484-644-0505 and the pass code is 71815. You can download the latest basic profile draft from; https://forge.gridforum.org/projects/ogsa-wg/document/draft-ggf-ogsa-basi= c-profi le/en/3 Now we have four open security related issues on this profile; #1320: Transport and/or Message Level security MUST or SHOULD?? #1321: Discovery of key-info for encryption in message level security Service Group Profile/ EPR embedding #1322: Use of Proxy Certificates Standard but not widely adopted outside of grid communit Time boxed certificates (short lived certs) #1323: Communication of assertions Profiles for common assertions in headers or Proxy Certificate #1324: Separate Security Basic Profile Should we have a separate profile document for security Basic profile tracker is at; https://forge.gridforum.org/tracker/index.php?group_id=3D42&atid=3D780 Thanks, ---- Hiro Kishimoto the

current draft and comment on the current open issues (or raise others). This means that interested parties will need to engage within the next few days to have maximal effectiveness. I encourage those interested in OGSA to engage on the Basic Profile = now. =20 The response to the question about which use cases from the OGSA use case document must be supported by the Basic Profile was "all of them". However, since we will not have a normative spec for WS-Delegation by June, nor do I know any other credential delegation standard, I suspect there was likely a misunderstanding. Takuya will follow up on that question. =20 I believe Hiro and Ian (chairs of OGSA-WG) will second me in saying that input on this document from security experts is welcomed and requested. The most effective form would be for people to join the mailing list and attend the relevant phonecons. The next most effective is to download and read the current drafts and provide comments to the list. =20 Frank and Takuya have volunteered to try to alert the area about relevant phonecons and open issues. However, they will not be able to relay comments/discussion with this short timeline. Interested parties will have to join them directly to keep up with the discussion. =20 Cheers, Dane =20

------- end of forwarded message -------