[Chapter-delegates] Trust, Identity, and IETF 73

[Lucy Lynch]

All -

I thought I'd highlight up a couple of things happening early in the IETF 
73 week that are Trust and Identity related and may be of interest to 
anyone following this initiative.

DKIM Deployment (DDX: I2/ISOC/IETF)
--------------------------------------------------------------------
https://spaces.internet2.edu/display/ddx/DKIM+Deployment

Initial planning meeting
Date and time:  1:30 - 5:30, November 16 2008
Location:  Hilton Minneapolis, Boardroom C, 3rd floor

This is an invitational meeting to solidify plans for a DKIM trial effort. 
We'll be working with mail admins from several large I2 institutions and
IETF experts to look at a trial deployment.

Goals of meeting:

     * bring people up to speed on DKIM technology, status, and deployment
       strategies
     * discuss goals and methods of proposed experiment, seeking consensus
     * discuss related technologies of potential interest
       (ADSP, SPF, DNSsec, VouchByReference, e.g.)
     * assess level of interest in further participation in the activity

OAuth (oauth) BoF
-------------------------------------------------------------------------
MONDAY, November 17, 2008
1300-1500 Afternoon Session I Salon C

     * Status: Requested
     * Responsible AD: Lisa Dusseault
     * Drafts:
       http://www.ietf.org/internet-drafts/draft-hammer-oauth-00.txt
     * Agenda: TBD
     * Charter: none yet
     * Discussions: http://groups.google.com/group/oauth/
     * Summary and scope: This BOF is to discuss whether OAuth,
        or some variant of the OAuth already proposed at oauth.net,
        ought to become an IETF standard, and if so, with what
        requirements.

This is a second go-round for an identity related technologies effort as 
there was a failed attempt to bring some of the OpenID related work (DIX 
BoF) into the IETF several years ago. Since that time the work has 
progressed in the open source community and there is a more focused effort 
(OAuth) which will be discussed at this BoF.

What is OAuth?
It is an open source industry standard to allow a user with an account on one 
website (the service provider), to allow another website (the consumer) to 
access their data from the first website.

OAuth already was major traction with large Web Service providers
(Google, Plaxo, Microsoft, etc.) and more details can be found here:

OAuth Developers:     http://oauth.net/
Google Efforts:       http://sites.google.com/site/oauthgoog/
DIX BoF (historical): http://trac.tools.ietf.org/bof/trac/wiki/dix


Best -

Lucy Lynch
Director of Technical Projects
Internet Society (ISOC)