Security Minutes 2007-09-12

From MemberWiki

Jump to: navigation, search

URL: http://www.openajax.org/member/wiki/Security_Minutes_2007-09-12

Contents

OpenAjax Alliance Security Task Force minutes 2007-09-12

Attendees

  • Larry Koved <koved(at)us.ibm.com>, chair
  • Jon Ferraiolo <jferrai(at)us.ibm.com>
  • Todd Kaplinger <todkap(at)us.ibm.com>
  • Frederik De Keukelaere <eb41704(at)jp.ibm.com>
  • Bertrand Le Roy <bleroy (at) microsoft.com>
  • Sachiko Yoshihama <SACHIKOY(at)jp.ibm.com>

Original Agenda

  • Summary of the previous meeting (consensus and open issues, action items for the group)
  • WP3 - Ajax and Mashup Security security white paper status
  • Status of Hub 1.1 & the call on the 19th
    • SMash status & timeline for Hub 1.1 prototype
    • F2F meeting? Who, what, when?
    • As time allows:
      • Start discussion of the server-side issues
      • Start discussion of authentication issues
  • Date/time for follow-up task force phone call
  • Wrap up

Minutes

Topic: Interop conference call next Wednesday 8pm EDT, 5pm PDT, 9am JDT.

no other discussion

Topic: Jon posting the security white paper

Topic: Market

  • AjaxWorld Magazine to publish 3 articles. One is a condensed version of the security article -- ~1200 words. References the OAA article.

Topic: SMash released to SourceForge

just an announcement

Topic: Face-2-face meeting?

  • ~ 1/2 people will be either interop or security folks. Most of the discussion will be technical.
  • Thursday September 27 @ MS in Mountain View.
  • F2F agenda: http://www.openajax.org/member/wiki/2007_September_Members_Meeting_Agenda
  • Google Gears team may show up to discuss offline features. May work around their schedule.
  • (Logistics discussion to enable remote participation)

Topic: Authentication scenarios (Larry)

  • Identify scenarios and technologies we want to influence.
  • See how to fit this into the interop
  • Jon: Seems like this fits into the OpenAjax mission.
  • Larry: IBM interested in working in this area
  • Bertrand: Live ID -- needs to find the right people... Maybe InfoCard / CardSpace folks
  • SAP? Novell? ????
Personal tools