From gerry at strata.io Wed Aug 9 17:55:48 2023 From: gerry at strata.io (Gerry Gebel) Date: Wed, 9 Aug 2023 10:55:48 -0700 Subject: [policy-charter] Reminder: weekly call tomorrow at 8am PT / 17:00 CET Message-ID: Hi all, Hopefully you have already subscribed to the OIDF calendar per Mike's note from last week. If not, you can do so here: https://openid.net/calendar/ Suggested agenda: - Outreach report: OASIS (David), OPA (Omri), NIST (Gerry) - Review current work - Continue discussing scope Best regards, Gerry -------------- next part -------------- An HTML attachment was scrubbed... URL: From omri at aserto.com Wed Aug 9 19:50:51 2023 From: omri at aserto.com (Omri Gazitt) Date: Wed, 9 Aug 2023 12:50:51 -0700 Subject: [policy-charter] Reminder: weekly call tomorrow at 8am PT / 17:00 CET In-Reply-To: References: Message-ID: Brief update on OPA - Anders Eknert from Styra expressed interest to join, but can't make Thursdays 5pm CEST due to an ongoing conflict. He asked me whether the meetings are recorded - are they? Thanks, Omri. On Wed, Aug 9, 2023 at 10:56?AM Gerry Gebel via policy-charter < policy-charter at lists.openid.net> wrote: > Hi all, > > Hopefully you have already subscribed to the OIDF calendar per Mike's note > from last week. If not, you can do so here: https://openid.net/calendar/ > > Suggested agenda: > > - Outreach report: OASIS (David), OPA (Omri), NIST (Gerry) > - Review current work > - Continue discussing scope > > Best regards, > Gerry > -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -------------- next part -------------- An HTML attachment was scrubbed... URL: From gerry at strata.io Wed Aug 9 21:28:36 2023 From: gerry at strata.io (Gerry Gebel) Date: Wed, 9 Aug 2023 14:28:36 -0700 Subject: [policy-charter] Reminder: weekly call tomorrow at 8am PT / 17:00 CET In-Reply-To: References: Message-ID: Hi Omri - No, the meetings have not been recorded so far but we could discuss that tomorrow Thanks, Gerry On Wed, Aug 9, 2023 at 12:51?PM Omri Gazitt wrote: > Brief update on OPA - Anders Eknert from Styra expressed interest to join, > but can't make Thursdays 5pm CEST due to an ongoing conflict. He asked me > whether the meetings are recorded - are they? > > Thanks, > Omri. > > On Wed, Aug 9, 2023 at 10:56?AM Gerry Gebel via policy-charter < > policy-charter at lists.openid.net> wrote: > >> Hi all, >> >> Hopefully you have already subscribed to the OIDF calendar per Mike's >> note from last week. If not, you can do so here: >> https://openid.net/calendar/ >> >> Suggested agenda: >> >> - Outreach report: OASIS (David), OPA (Omri), NIST (Gerry) >> - Review current work >> - Continue discussing scope >> >> Best regards, >> Gerry >> -- >> policy-charter mailing list >> policy-charter at lists.openid.net >> https://lists.openid.net/mailman/listinfo/policy-charter >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From atul at sgnl.ai Wed Aug 9 21:32:30 2023 From: atul at sgnl.ai (Atul Tulshibagwale) Date: Wed, 9 Aug 2023 14:32:30 -0700 Subject: [policy-charter] Reminder: weekly call tomorrow at 8am PT / 17:00 CET In-Reply-To: References: Message-ID: Hi all, On tomorrow's call, can we discuss what is required to submit the charter to the OpenID Foundation? I've made some suggested changes to the charter doc , but they haven't been accepted / commented on yet. I believe we should first do this so that subsequent meetings can be held in accordance with the OpenID Foundation's normal process. Thanks, Atul On Wed, Aug 9, 2023 at 2:28?PM Gerry Gebel via policy-charter < policy-charter at lists.openid.net> wrote: > Hi Omri - > > No, the meetings have not been recorded so far but we could discuss that > tomorrow > > Thanks, > Gerry > > On Wed, Aug 9, 2023 at 12:51?PM Omri Gazitt wrote: > >> Brief update on OPA - Anders Eknert from Styra expressed interest to >> join, but can't make Thursdays 5pm CEST due to an ongoing conflict. He >> asked me whether the meetings are recorded - are they? >> >> Thanks, >> Omri. >> >> On Wed, Aug 9, 2023 at 10:56?AM Gerry Gebel via policy-charter < >> policy-charter at lists.openid.net> wrote: >> >>> Hi all, >>> >>> Hopefully you have already subscribed to the OIDF calendar per Mike's >>> note from last week. If not, you can do so here: >>> https://openid.net/calendar/ >>> >>> Suggested agenda: >>> >>> - Outreach report: OASIS (David), OPA (Omri), NIST (Gerry) >>> - Review current work >>> - Continue discussing scope >>> >>> Best regards, >>> Gerry >>> -- >>> policy-charter mailing list >>> policy-charter at lists.openid.net >>> https://lists.openid.net/mailman/listinfo/policy-charter >>> >> -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -- Atul Tulshibagwale CTO -------------- next part -------------- An HTML attachment was scrubbed... URL: From omri at aserto.com Wed Aug 9 23:27:28 2023 From: omri at aserto.com (Omri Gazitt) Date: Wed, 9 Aug 2023 16:27:28 -0700 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: Atul, I think there are two efforts going on, PDP-PEP and PAP-PDP, with two different owners (Andrew Hughes and Gerry). The meetings that Gerry set up were focused on the latter, but I believe we all agreed in the last call that we ought to have a single charter with different workstreams, since the majority of folks are interested in both. The charter proposal that both of us commented on is related to the former (PDP-PEP). During tomorrow's meeting, perhaps we should discuss whether we should have a single charter, and decide whether we want to have two workstreams or one? Thanks, Omri. On Fri, Jul 28, 2023 at 9:38?AM Atul Tulshibagwale via policy-charter < policy-charter at lists.openid.net> wrote: > Hi all, > Someone mentioned to me they didn't know where the charter doc was, so I'm > sharing it here: > > DRAFT Charter Proposal for PDP-PEP Interoperabi... > > > Atul > > On Thu, Jul 27, 2023 at 3:30?PM Atul Tulshibagwale wrote: > >> Hi all, >> FYI: I've suggested changes to the policy charter doc: i've restated the >> purpose and used the alternate suggested name. Also added the AuthZAPI as a >> proposed deliverable. >> >> Atul >> >> -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -------------- next part -------------- An HTML attachment was scrubbed... URL: From gerry at strata.io Thu Aug 10 00:11:34 2023 From: gerry at strata.io (Gerry Gebel) Date: Wed, 9 Aug 2023 17:11:34 -0700 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: Omri, Atul - My recollection is that the group was leaning toward one charter for both workstreams since there is so much overlap in the participants. Regards, Gerry On Wed, Aug 9, 2023 at 4:27?PM Omri Gazitt via policy-charter < policy-charter at lists.openid.net> wrote: > Atul, I think there are two efforts going on, PDP-PEP and PAP-PDP, with > two different owners (Andrew Hughes and Gerry). The meetings that Gerry > set up were focused on the latter, but I believe we all agreed in the last > call that we ought to have a single charter with different workstreams, > since the majority of folks are interested in both. > > The charter proposal that both of us commented on is related to the former > (PDP-PEP). > > During tomorrow's meeting, perhaps we should discuss whether we should > have a single charter, and decide whether we want to have two workstreams > or one? > > Thanks, > Omri. > > On Fri, Jul 28, 2023 at 9:38?AM Atul Tulshibagwale via policy-charter < > policy-charter at lists.openid.net> wrote: > >> Hi all, >> Someone mentioned to me they didn't know where the charter doc was, so >> I'm sharing it here: >> >> DRAFT Charter Proposal for PDP-PEP Interoperabi... >> >> >> Atul >> >> On Thu, Jul 27, 2023 at 3:30?PM Atul Tulshibagwale wrote: >> >>> Hi all, >>> FYI: I've suggested changes to the policy charter doc: i've restated the >>> purpose and used the alternate suggested name. Also added the AuthZAPI as a >>> proposed deliverable. >>> >>> Atul >>> >>> -- >> policy-charter mailing list >> policy-charter at lists.openid.net >> https://lists.openid.net/mailman/listinfo/policy-charter >> > -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -------------- next part -------------- An HTML attachment was scrubbed... URL: From omri at aserto.com Thu Aug 10 00:32:04 2023 From: omri at aserto.com (Omri Gazitt) Date: Wed, 9 Aug 2023 17:32:04 -0700 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: That is my recollection as well. On Wed, Aug 9, 2023 at 5:11 PM Gerry Gebel wrote: > Omri, Atul - > > My recollection is that the group was leaning toward one charter for both > workstreams since there is so much overlap in the participants. > > Regards, > Gerry > > On Wed, Aug 9, 2023 at 4:27?PM Omri Gazitt via policy-charter < > policy-charter at lists.openid.net> wrote: > >> Atul, I think there are two efforts going on, PDP-PEP and PAP-PDP, with >> two different owners (Andrew Hughes and Gerry). The meetings that Gerry >> set up were focused on the latter, but I believe we all agreed in the last >> call that we ought to have a single charter with different workstreams, >> since the majority of folks are interested in both. >> >> The charter proposal that both of us commented on is related to the >> former (PDP-PEP). >> >> During tomorrow's meeting, perhaps we should discuss whether we should >> have a single charter, and decide whether we want to have two workstreams >> or one? >> >> Thanks, >> Omri. >> >> On Fri, Jul 28, 2023 at 9:38?AM Atul Tulshibagwale via policy-charter < >> policy-charter at lists.openid.net> wrote: >> >>> Hi all, >>> Someone mentioned to me they didn't know where the charter doc was, so >>> I'm sharing it here: >>> >>> DRAFT Charter Proposal for PDP-PEP Interoperabi... >>> >>> >>> Atul >>> >>> On Thu, Jul 27, 2023 at 3:30?PM Atul Tulshibagwale wrote: >>> >>>> Hi all, >>>> FYI: I've suggested changes to the policy charter doc: i've restated >>>> the purpose and used the alternate suggested name. Also added the AuthZAPI >>>> as a proposed deliverable. >>>> >>>> Atul >>>> >>>> -- >>> policy-charter mailing list >>> policy-charter at lists.openid.net >>> https://lists.openid.net/mailman/listinfo/policy-charter >>> >> -- >> policy-charter mailing list >> policy-charter at lists.openid.net >> https://lists.openid.net/mailman/listinfo/policy-charter >> > -- Omri Gazitt | CEO Aserto Inc. | (425) 765-0079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From atul at sgnl.ai Thu Aug 10 00:36:39 2023 From: atul at sgnl.ai (Atul Tulshibagwale) Date: Wed, 9 Aug 2023 17:36:39 -0700 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: I agree that we should have a broad charter that covers both the areas of interest. I have tried to take this view in the changes that I suggested to the charter. On Wed, Aug 9, 2023, 5:32 PM Omri Gazitt via policy-charter < policy-charter at lists.openid.net> wrote: > That is my recollection as well. > > On Wed, Aug 9, 2023 at 5:11 PM Gerry Gebel wrote: > >> Omri, Atul - >> >> My recollection is that the group was leaning toward one charter for both >> workstreams since there is so much overlap in the participants. >> >> Regards, >> Gerry >> >> On Wed, Aug 9, 2023 at 4:27?PM Omri Gazitt via policy-charter < >> policy-charter at lists.openid.net> wrote: >> >>> Atul, I think there are two efforts going on, PDP-PEP and PAP-PDP, with >>> two different owners (Andrew Hughes and Gerry). The meetings that Gerry >>> set up were focused on the latter, but I believe we all agreed in the last >>> call that we ought to have a single charter with different workstreams, >>> since the majority of folks are interested in both. >>> >>> The charter proposal that both of us commented on is related to the >>> former (PDP-PEP). >>> >>> During tomorrow's meeting, perhaps we should discuss whether we should >>> have a single charter, and decide whether we want to have two workstreams >>> or one? >>> >>> Thanks, >>> Omri. >>> >>> On Fri, Jul 28, 2023 at 9:38?AM Atul Tulshibagwale via policy-charter < >>> policy-charter at lists.openid.net> wrote: >>> >>>> Hi all, >>>> Someone mentioned to me they didn't know where the charter doc was, so >>>> I'm sharing it here: >>>> >>>> DRAFT Charter Proposal for PDP-PEP Interoperabi... >>>> >>>> >>>> Atul >>>> >>>> On Thu, Jul 27, 2023 at 3:30?PM Atul Tulshibagwale >>>> wrote: >>>> >>>>> Hi all, >>>>> FYI: I've suggested changes to the policy charter doc: i've restated >>>>> the purpose and used the alternate suggested name. Also added the AuthZAPI >>>>> as a proposed deliverable. >>>>> >>>>> Atul >>>>> >>>>> -- >>>> policy-charter mailing list >>>> policy-charter at lists.openid.net >>>> https://lists.openid.net/mailman/listinfo/policy-charter >>>> >>> -- >>> policy-charter mailing list >>> policy-charter at lists.openid.net >>> https://lists.openid.net/mailman/listinfo/policy-charter >>> >> -- > > > > Omri Gazitt | CEO > > Aserto Inc. | (425) 765-0079 > -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex at 3edges.com Thu Aug 10 16:13:34 2023 From: alex at 3edges.com (Alex Babeanu) Date: Thu, 10 Aug 2023 09:13:34 -0700 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: Hi all, Couldn't make today's meeting, so I'm not sure if this was discussed. But just in case... Given that defining Use-cases and Patterns for AuthZ is part of the scope of the WG charter, just wanted to remind everyone that we have a draft doc that goes through these, here : https://docs.google.com/document/d/1xf5H2hLSJVa-iRTenwlAlD48dntbL8uuItDQlCIonUI/edit?usp=sharing Cheers, ./\lex. -- [image: This is Alexandre Babeanu's card. Their email is alex at 3edges.com. Their phone number is +1 604 728 8130.] On Wed, Aug 9, 2023 at 5:36?PM Atul Tulshibagwale via policy-charter < policy-charter at lists.openid.net> wrote: > I agree that we should have a broad charter that covers both the areas of > interest. I have tried to take this view in the changes that I suggested to > the charter. > > On Wed, Aug 9, 2023, 5:32 PM Omri Gazitt via policy-charter < > policy-charter at lists.openid.net> wrote: > >> That is my recollection as well. >> >> On Wed, Aug 9, 2023 at 5:11 PM Gerry Gebel wrote: >> >>> Omri, Atul - >>> >>> My recollection is that the group was leaning toward one charter for >>> both workstreams since there is so much overlap in the participants. >>> >>> Regards, >>> Gerry >>> >>> On Wed, Aug 9, 2023 at 4:27?PM Omri Gazitt via policy-charter < >>> policy-charter at lists.openid.net> wrote: >>> >>>> Atul, I think there are two efforts going on, PDP-PEP and PAP-PDP, with >>>> two different owners (Andrew Hughes and Gerry). The meetings that Gerry >>>> set up were focused on the latter, but I believe we all agreed in the last >>>> call that we ought to have a single charter with different workstreams, >>>> since the majority of folks are interested in both. >>>> >>>> The charter proposal that both of us commented on is related to the >>>> former (PDP-PEP). >>>> >>>> During tomorrow's meeting, perhaps we should discuss whether we should >>>> have a single charter, and decide whether we want to have two workstreams >>>> or one? >>>> >>>> Thanks, >>>> Omri. >>>> >>>> On Fri, Jul 28, 2023 at 9:38?AM Atul Tulshibagwale via policy-charter < >>>> policy-charter at lists.openid.net> wrote: >>>> >>>>> Hi all, >>>>> Someone mentioned to me they didn't know where the charter doc was, so >>>>> I'm sharing it here: >>>>> >>>>> DRAFT Charter Proposal for PDP-PEP Interoperabi... >>>>> >>>>> >>>>> Atul >>>>> >>>>> On Thu, Jul 27, 2023 at 3:30?PM Atul Tulshibagwale >>>>> wrote: >>>>> >>>>>> Hi all, >>>>>> FYI: I've suggested changes to the policy charter doc: i've restated >>>>>> the purpose and used the alternate suggested name. Also added the AuthZAPI >>>>>> as a proposed deliverable. >>>>>> >>>>>> Atul >>>>>> >>>>>> -- >>>>> policy-charter mailing list >>>>> policy-charter at lists.openid.net >>>>> https://lists.openid.net/mailman/listinfo/policy-charter >>>>> >>>> -- >>>> policy-charter mailing list >>>> policy-charter at lists.openid.net >>>> https://lists.openid.net/mailman/listinfo/policy-charter >>>> >>> -- >> >> >> >> Omri Gazitt | CEO >> >> Aserto Inc. | (425) 765-0079 >> -- >> policy-charter mailing list >> policy-charter at lists.openid.net >> https://lists.openid.net/mailman/listinfo/policy-charter >> > -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -- CONFIDENTIALITY NOTICE: This e-mail message, including any attachments hereto, is for the sole use of the intended recipient(s) and may contain confidential and/or proprietary information. -------------- next part -------------- An HTML attachment was scrubbed... URL: From acampbell at duosecurity.com Thu Aug 10 16:50:25 2023 From: acampbell at duosecurity.com (Aaron Campbell) Date: Thu, 10 Aug 2023 13:50:25 -0300 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: Hi all, I'm not sure I ever properly introduced myself, but I work in the Cisco Security Business Group, primarily on interactive user authentication, especially as it relates to secure access. Policy is a big topic for us, both from an authorization as well as authentication angle, and I hope we can bring a unique perspective. Appreciate all the great dialog today around a very complex topic, although it does seem we are still spinning our wheels a bit. We touched on this briefly at the first meeting, but I'd urge an evaluation of the existing technologies and choose one to foster and build upon, rather than treat all of the current systems as equally worthy of being supported by an interoperability-focused standard. That just seems way too hard given the fluidity of the space and the differing capabilities, as was already mentioned. Plus it feels like you'd end up in a place where the standard only supports the lowest common denominator instead of the more advanced features that already exist. I expanded on these thoughts a bit at the end of the charter doc, if anyone has thoughts. I haven't participated much in standards bodies in the past and eager to learn more from all of you. :) -Aaron -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex at 3edges.com Thu Aug 10 17:29:23 2023 From: alex at 3edges.com (Alex Babeanu) Date: Thu, 10 Aug 2023 10:29:23 -0700 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: Re: " but I'd urge an evaluation of the existing technologies and choose one to foster and build upon" -- I strongly disagree!! Whatever we do should be tech-agnostic. Or are you proposing to kill right away whichever company/org doesn't use your "chosen" tech ?? I think the idea is to build interop standards: whatever tech you use, we need to be able to exchange data about AuthZ. So start top down instead of bottom up. Cheers, ./\. On Thu, Aug 10, 2023 at 9:51?AM Aaron Campbell via policy-charter < policy-charter at lists.openid.net> wrote: > Hi all, > > I'm not sure I ever properly introduced myself, but I work in the Cisco > Security Business Group, primarily on interactive user authentication, > especially as it relates to secure access. Policy is a big topic for us, > both from an authorization as well as authentication angle, and I hope we > can bring a unique perspective. > > Appreciate all the great dialog today around a very complex topic, > although it does seem we are still spinning our wheels a bit. > > We touched on this briefly at the first meeting, but I'd urge an > evaluation of the existing technologies and choose one to foster and build > upon, rather than treat all of the current systems as equally worthy of > being supported by an interoperability-focused standard. That just seems > way too hard given the fluidity of the space and the > differing capabilities, as was already mentioned. Plus it feels like you'd > end up in a place where the standard only supports the lowest common > denominator instead of the more advanced features that already exist. > > I expanded on these thoughts a bit at the end of the charter doc, if > anyone has thoughts. I haven't participated much in standards bodies in the > past and eager to learn more from all of you. :) > > -Aaron > -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -- [image: This is Alexandre Babeanu's card. Their email is alex at 3edges.com. Their phone number is +1 604 728 8130.] -- CONFIDENTIALITY NOTICE: This e-mail message, including any attachments hereto, is for the sole use of the intended recipient(s) and may contain confidential and/or proprietary information. -------------- next part -------------- An HTML attachment was scrubbed... URL: From acampbell at duosecurity.com Thu Aug 10 17:43:43 2023 From: acampbell at duosecurity.com (Aaron Campbell) Date: Thu, 10 Aug 2023 14:43:43 -0300 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: On Thu, Aug 10, 2023 at 2:29?PM Alex Babeanu wrote: > Re: " but I'd urge an evaluation of the existing technologies and choose > one to foster and build upon" > -- I strongly disagree!! Whatever we do should be tech-agnostic. Or are > you proposing to kill right away whichever company/org doesn't use your > "chosen" tech ?? > > I think the idea is to build interop standards: whatever tech you use, we > need to be able to exchange data about AuthZ. So start top down instead of > bottom up. > That's not what I'm saying. I'm saying that years of effort have already gone into building existing policy languages for effecting AuthZ, some of them more suited to standardization than others. For example, SQL first came out of IBM. And then became standardized. That created a common base layer for other tech to grow from. I agree w/ what Andrew Hughes said in the doc: DISCUSS: are we going to reconcile the different conceptual underpinnings of all the approaches? Seems ambitious. -Aaron -------------- next part -------------- An HTML attachment was scrubbed... URL: From gerry at strata.io Thu Aug 10 18:30:36 2023 From: gerry at strata.io (Gerry Gebel) Date: Thu, 10 Aug 2023 11:30:36 -0700 Subject: [policy-charter] new time/date for this group Message-ID: Hi - We are currently in the same time slot as the SIOP special topic call, so OIDF has asked us to move to a different time. On today's call it was suggested that we move to Tuesdays at 9am PT - please indicate whether that works for your schedule Thanks Gerry -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex at 3edges.com Thu Aug 10 18:32:37 2023 From: alex at 3edges.com (Alex Babeanu) Date: Thu, 10 Aug 2023 11:32:37 -0700 Subject: [policy-charter] new time/date for this group In-Reply-To: References: Message-ID: Works for me. Thx. ./\. On Thu, Aug 10, 2023 at 11:30?AM Gerry Gebel via policy-charter < policy-charter at lists.openid.net> wrote: > Hi - > > We are currently in the same time slot as the SIOP special topic call, so > OIDF has asked us to move to a different time. > > On today's call it was suggested that we move to Tuesdays at 9am PT - > please indicate whether that works for your schedule > > Thanks > Gerry > -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -- [image: This is Alexandre Babeanu's card. Their email is alex at 3edges.com. Their phone number is +1 604 728 8130.] -- CONFIDENTIALITY NOTICE: This e-mail message, including any attachments hereto, is for the sole use of the intended recipient(s) and may contain confidential and/or proprietary information. -------------- next part -------------- An HTML attachment was scrubbed... URL: From alex at 3edges.com Thu Aug 10 18:40:48 2023 From: alex at 3edges.com (Alex Babeanu) Date: Thu, 10 Aug 2023 11:40:48 -0700 Subject: [policy-charter] Updates to the charter doc In-Reply-To: References: Message-ID: Seems ambitious indeed, when all the participants of this workgroup have their own very different ways of doing things... For instance, we're using pure graphs (not "tuples', actual vertices and edges). To me it's the best approach of course. The only way to "top" this would be to use natural language, imho. Let's hear it from those who don't agree :)... And anyway yet another language or methodology for authz is not in the proposed charter scope. That's my $0.02, waiting for others to chime in though... ./\. On Thu, Aug 10, 2023 at 10:44?AM Aaron Campbell wrote: > On Thu, Aug 10, 2023 at 2:29?PM Alex Babeanu wrote: > >> Re: " but I'd urge an evaluation of the existing technologies and choose >> one to foster and build upon" >> -- I strongly disagree!! Whatever we do should be tech-agnostic. Or are >> you proposing to kill right away whichever company/org doesn't use your >> "chosen" tech ?? >> >> I think the idea is to build interop standards: whatever tech you use, we >> need to be able to exchange data about AuthZ. So start top down instead of >> bottom up. >> > > That's not what I'm saying. I'm saying that years of effort have already > gone into building existing policy languages for effecting AuthZ, some of > them more suited to standardization than others. For example, SQL first > came out of IBM. And then became standardized. That created a common base > layer for other tech to grow from. > > I agree w/ what Andrew Hughes said in the doc: > > DISCUSS: are we going to reconcile the different conceptual underpinnings > of all the approaches? Seems ambitious. > > -Aaron > -- [image: This is Alexandre Babeanu's card. Their email is alex at 3edges.com. Their phone number is +1 604 728 8130.] -- CONFIDENTIALITY NOTICE: This e-mail message, including any attachments hereto, is for the sole use of the intended recipient(s) and may contain confidential and/or proprietary information. -------------- next part -------------- An HTML attachment was scrubbed... URL: From acampbell at duosecurity.com Thu Aug 10 19:04:50 2023 From: acampbell at duosecurity.com (Aaron Campbell) Date: Thu, 10 Aug 2023 16:04:50 -0300 Subject: [policy-charter] new time/date for this group In-Reply-To: References: Message-ID: On Thu, Aug 10, 2023 at 3:30?PM Gerry Gebel via policy-charter < policy-charter at lists.openid.net> wrote: > Hi - > > We are currently in the same time slot as the SIOP special topic call, so > OIDF has asked us to move to a different time. > > On today's call it was suggested that we move to Tuesdays at 9am PT - > please indicate whether that works for your schedule > This time works for me, thanks Gerry. -Aaron -------------- next part -------------- An HTML attachment was scrubbed... URL: From andrewhughes at pingidentity.com Thu Aug 10 19:23:19 2023 From: andrewhughes at pingidentity.com (Andrew Hughes) Date: Thu, 10 Aug 2023 12:23:19 -0700 Subject: [policy-charter] new time/date for this group In-Reply-To: References: Message-ID: It works On Thu, Aug 10, 2023 at 12:05 PM Aaron Campbell via policy-charter < policy-charter at lists.openid.net> wrote: > On Thu, Aug 10, 2023 at 3:30?PM Gerry Gebel via policy-charter < > policy-charter at lists.openid.net> wrote: > >> Hi - >> >> We are currently in the same time slot as the SIOP special topic call, so >> OIDF has asked us to move to a different time. >> >> On today's call it was suggested that we move to Tuesdays at 9am PT - >> please indicate whether that works for your schedule >> > > This time works for me, thanks Gerry. > > -Aaron > -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -- Andrew Hughes Director, Identity Standards Ping Identity Signal/Mobile: +12508889474 -- _CONFIDENTIALITY NOTICE: This email may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited.? If you have received this communication in error, please notify the sender immediately by e-mail and delete the message and any file attachments from your computer. Thank you._ -------------- next part -------------- An HTML attachment was scrubbed... URL: From gerry at strata.io Thu Aug 10 23:42:56 2023 From: gerry at strata.io (Gerry Gebel) Date: Thu, 10 Aug 2023 16:42:56 -0700 Subject: [policy-charter] new time/date for this group In-Reply-To: References: Message-ID: Mike - please update the calendar and move this call to Tuesdays at 9:00am PT Thanks, Gerry On Thu, Aug 10, 2023 at 12:23?PM Andrew Hughes via policy-charter < policy-charter at lists.openid.net> wrote: > It works > > On Thu, Aug 10, 2023 at 12:05 PM Aaron Campbell via policy-charter < > policy-charter at lists.openid.net> wrote: > >> On Thu, Aug 10, 2023 at 3:30?PM Gerry Gebel via policy-charter < >> policy-charter at lists.openid.net> wrote: >> >>> Hi - >>> >>> We are currently in the same time slot as the SIOP special topic call, >>> so OIDF has asked us to move to a different time. >>> >>> On today's call it was suggested that we move to Tuesdays at 9am PT - >>> please indicate whether that works for your schedule >>> >> >> This time works for me, thanks Gerry. >> >> -Aaron >> -- >> policy-charter mailing list >> policy-charter at lists.openid.net >> https://lists.openid.net/mailman/listinfo/policy-charter >> > -- > Andrew Hughes > Director, Identity Standards > Ping Identity > Signal/Mobile: +12508889474 > > *CONFIDENTIALITY NOTICE: This email may contain confidential and > privileged material for the sole use of the intended recipient(s). Any > review, use, distribution or disclosure by others is strictly prohibited. > If you have received this communication in error, please notify the sender > immediately by e-mail and delete the message and any file attachments from > your computer. Thank you.*-- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -------------- next part -------------- An HTML attachment was scrubbed... URL: From omri at aserto.com Fri Aug 11 00:14:09 2023 From: omri at aserto.com (Omri Gazitt) Date: Thu, 10 Aug 2023 17:14:09 -0700 Subject: [policy-charter] new time/date for this group In-Reply-To: References: Message-ID: Thanks Gerry! On Thu, Aug 10, 2023 at 4:43?PM Gerry Gebel via policy-charter < policy-charter at lists.openid.net> wrote: > Mike - please update the calendar and move this call to Tuesdays at 9:00am > PT > > Thanks, > Gerry > > On Thu, Aug 10, 2023 at 12:23?PM Andrew Hughes via policy-charter < > policy-charter at lists.openid.net> wrote: > >> It works >> >> On Thu, Aug 10, 2023 at 12:05 PM Aaron Campbell via policy-charter < >> policy-charter at lists.openid.net> wrote: >> >>> On Thu, Aug 10, 2023 at 3:30?PM Gerry Gebel via policy-charter < >>> policy-charter at lists.openid.net> wrote: >>> >>>> Hi - >>>> >>>> We are currently in the same time slot as the SIOP special topic call, >>>> so OIDF has asked us to move to a different time. >>>> >>>> On today's call it was suggested that we move to Tuesdays at 9am PT - >>>> please indicate whether that works for your schedule >>>> >>> >>> This time works for me, thanks Gerry. >>> >>> -Aaron >>> -- >>> policy-charter mailing list >>> policy-charter at lists.openid.net >>> https://lists.openid.net/mailman/listinfo/policy-charter >>> >> -- >> Andrew Hughes >> Director, Identity Standards >> Ping Identity >> Signal/Mobile: +12508889474 >> >> *CONFIDENTIALITY NOTICE: This email may contain confidential and >> privileged material for the sole use of the intended recipient(s). Any >> review, use, distribution or disclosure by others is strictly prohibited. >> If you have received this communication in error, please notify the sender >> immediately by e-mail and delete the message and any file attachments from >> your computer. Thank you.*-- >> policy-charter mailing list >> policy-charter at lists.openid.net >> https://lists.openid.net/mailman/listinfo/policy-charter >> > -- > policy-charter mailing list > policy-charter at lists.openid.net > https://lists.openid.net/mailman/listinfo/policy-charter > -------------- next part -------------- An HTML attachment was scrubbed... URL: