1. Technical Working Group December 2000 Mark Davis Andrew Nash

2. Agenda u Agenda praise (in lieu of bashing) –a TWG tradition u Introductions –Name, Company, Vendor/Exploiter/Customer u Objectives and Ground Rules u Project and White Paper Objectives u Status at end of September Meeting

3. TWG Agenda for Wednesday and Thursday, 12/6,7 u CMP Interoperability u CA-CA Interoperability u Token Interoperability u UK Gov Interop Trial u Application Certificate Use u Interoperability WP u OCSP Testing u Path Construction WP u IETF Update u Communities of Interest/Cross Cert u LDAP WP u Future Work This is a preliminary agenda. See web site for final version. Integrity to synch BWG Support Work Address Emergent Issues

4. Introductions u Mark Davis –IBM/Tivoli –Exploiter (yes we do sell CA’s but most use is exploitation) u Andrew Nash –RSA Security –PKI Vender

5. Objectives and Ground Rules  “… to accelerate the adoption and use of Public-Key Infrastructure (PKI) and PKI-based products and services.” u Leverage the expertise of Members u Projects lead by PKI Forum members u Results clearly PKI Forum effort u Maximum Involvement of all parties u Leverage existing standards, efforts, skills and organizations

6. … and other things u Mailing list signup and use u Project Plans and Status u Business WG organization –Marketing/Education –Policy & Privacy –Best Practices –Applications/Vert. Markets

7. Major Project Work Methodology u Description of Task u White papers/educational material/test cases u Interoperability workshops u Internal Documentation of results/lessons learned/recommendations u External Documentation u Focus on making it work! From March Meeting

8. External Project Report Objectives u Written materials reporting results –White papers –Matrixes –Presentations u Interim results remain private to PKIF u Consensus on timing and nature of results –Positive results desired –Describe PKI successes, not disadvantage products that don’t work during testing

9. White Paper Objectives u Address topics interfering with PKI interoperability u What does PKIF have to add –LDAP –Path Construction –NOT remote path validation! u May be related to specific Major Projects u Editor responsible to drive u Review/approval on list to assure agreement

10. Status from Montreal (September 2000) Montreal Participants u PKI Customers or Consumers u PKI Exploiters or 3 rd Party Developers u PKI Vendors 10 16 20 Meeting minutes are required We meet this requirement with “real time” PPT notes If time permits, quick review before Joint Session Input Solicited

11. Major Project Status u CMP Interoperability, Robert Moskowitz –In progress for 18 months w/ ICSA –5 workshops by September, 2000 –Testing over Internet –CMP complete perhaps by March 2001 –CMC next of interest u CA-CA Interoperability, Steve Lloyd –White paper only –First Draft prepared –Outline and scope discussed

12. Project Status Continued u Application Certificate Use, David Crowe –Deliverable is test scripts and interoperability datasheets –Certificate library being collected u Token Interoperation –Exploratory to determine scope of problem –White paper outline draft discussed

13. White Paper Status u LDAP Aidan O’Brien –Conference call reported on topics u Interoperability White Paper, Robert Moskowitz, Steve Lloyd –Provide framework for interoperability work

14. Other Discussions u IETF PKIX Standards update, Tim Polk –Steve Kent and Tim Polk Cochairs –Tim reviewed drafts in or near last call –Contentious areas: path discovery/validation u EMA Europe –PKI Interoperability project –Much opportunity for joint work u BWG Relations, Derek Brink –New work group organization –Q4 objectives –Communication process u Brainstorming on Whitepaper process

15. Other Sessions u Token Interoperability –Status report on PKCS 11 work –Potential future work u Interoperability White Paper –Crash effort to move this WP forward –Review current draft by Steve Lloyd –Suggested modifications –Fast track review process

16. www.PKIForum.org