KEYPROV

Weds afternoon

Notes taken by Paul Hoffman

[[ Note: contents of slides not reproduced here ]]

DSKPP
        Presented by David Mitton
        Lots of updates in -05
                Schema change had ripples into most of the doc
                Has been validated
        Ready for WG last call
        Sean T: thinks it is ready to go forward after
        inconsistencies are fixed

ASN.1 Key Container
        Presented by Sean Turner
        Put in some use cases
        Updated ASN.1 module to match text on an optional part
        Need to get the attribute requirements aligned between the two formats

PSKC
        Presented by Hannes Tschofenig
        Side note: almost no one has read the current version of the doc
        Andrea thinks it is free of issues
        Changes from -04
                Naming changes, including new namespace
        Reviewed the document
        Sections 1 to 4 were fine
        KeyContainer issues
                Manufacturer and serial number is supposed to be unique
        UsageType issues
                Is this mandatory or just a hint?
                Pasi E: If the document title cannot be changed to
                        indicate this is just about one-time-passwords and 
                        tokens, there is too much here Wants to know 
                        which attributes make sense for the contexts of the 
                        topic of the document
                        If the URI is X, the valid information for this is Y
                        Cannot be just in examples
                        Dave M: Doesn't think this it is tractible to
                                profile this
                        Pasi: This document needs to cover these
                              topics, later documents can add additional 
                              types of devices
                        Samuel ?: The examples don't cover all the
                                  types that are supposed to be covered
        DeviceInfoType issue
                How does this relate to some of the other elements?
                Is this a duplicate of another structure in the doc?
                Authors need to describe why they overlap
                Ping: Some keys can only be used in certain class of devices
                Hannes: How can this be used in an interoperable fashion?
                Ping: Mostly for logging
                Hannes: Authors should add information on how this is
                        supposed to be used
                Ping: It is up to the application on how to use the
                      intended usage
                Ping: Key usage is different in this case than in other parts
                Dave M: Should some of these be mandatory
                Pasi: Maybe can have different semantics for client and server
                      Will try to have a phone conference