Re: [apps-discuss] iSchedule

Cross post to the security directorate?

On Feb 22, 2013, at 11:14 AM, Cyrus Daboo <cyrus@daboo.name> wrote:

> Hi,
> For a while now a group of calendaring implementors (primarily within the Calendaring and Schedule Consortium - CalConnect) have been working on the iSchedule specification: <https://datatracker.ietf.org/doc/draft-desruisseaux-ischedule/>. This specification aims to define a cross-domain calendaring and scheduling protocol based on existing IETF iCalendar (RFC 5545) and iTIP (RFC 5546) standards, using HTTP as the transport.
> 
> We already have several experimental implementations of the protocol working interoperably (at the recent CalConnect event earlier this month we had four different implementations being tested).
> 
> We are now at a point where we want broader IETF review (in particular apps and security areas) with the ultimate goal of developing this specification into a standard. Having consulted with Barry Leiba, we are initially bringing this for discussion within the Apps Area WG - and I would like to request time at the Orlando meeting to discuss the draft.
> 
> There are two key pieces to this specification: iTIP over HTTP, and domain-level security. The first piece is pretty straight forward. The security piece is more complex.
> 
> In our own discussions we determined that a domain-level security model was the important use case to tackle (at least at first). Given that, we settled on using DKIM (RFC 6376) - mostly because we did not want to invent anything new and DKIM is a somewhat well understood, deployed, interopable solution. Of course, up until now, DKIM has been used solely for email. However, the original intent of that work was to allow it to be extended to other protocols as the need might arise. To that end, some initial work was done on defining a more generic version: DOSETA - <http://tools.ietf.org/id/draft-crocker-doseta-base-03.txt>, though the current iSchedule spec is couched in terms of DKIM rather than DOSETA right now, mostly because work on DOSETA stalled.
> 
> That is where we stand right now. We want to see a cross-domain scheduling standard produced by the IETF and believe our initial work on iSchedule is a good starting point. So this is a call to gauge interest in such work with the aim of perhaps having a BoF at the July meeting, or even a working group.
> 
> -- 
> Cyrus Daboo
> 
> _______________________________________________
> apps-discuss mailing list
> apps-discuss@ietf.org
> https://www.ietf.org/mailman/listinfo/apps-discuss