Re: [HASMAT] moving forward

[Tobias Gondrom <[e-mail]>]

 Hi all,

just a quick introduction for the ones who might not already know me:
Currently living in London, UK (timezone UTC/GMT+1). My background is in
Web application security, where until recently I spent the last couple
of years heading the security department of an ISV. I've been
co-chairing the LTANS WG in the security area for a couple of years
until this September when we successfully finish its work and close it.
Over the years I became a big fan of "rough consensus and running code".
;-) For me these principles helped a lot to get things done.
Besides enjoying IETF work, I am also member of OWASP (Open Web
Application Security Project) and probably have seen every web app
security problem in the book (and some which aren't).
When I read the drafts and saw the BOF proposal before Maastricht, I
feel very excited about it.
In the past I always worked around some of the problems posed by
underlying infrastructure and this is a great opportunity to remedy some
of the problems at the root!

Whatever I can do to help (even if it's not directly related to the WG),
please feel free to contact me via email, phone, skype,...  and of
course during IETF meetings. I am looking forward to work with you, the
progress of the WG, its charter and the three initial drafts and getting
things done!

Many greetings, Tobias


Ps.: as Peter mentioned we are still looking for a co-chair: Personally,
I feel a WG is faster and more productive with two co-chairs then just
one. So if you think about co-chairing with me, please please drop me a
note.


Tobias Gondrom
Sloan Fellowship 2009
London Business School
email: [e-mail]
mobile: [phone]


On 08/20/2010 07:08 PM, Peter Saint-Andre wrote:
> Following up on the successful BoF we held in Maastricht, I'd like to
> keep us moving toward formation of a working group. Here are some open
> tasks:
>
> 1. Chairs. Tobias Gondrom (currently co-chair of the LTANS WG in the
> Security Area) has stepped forward to volunteer and I think he'll make a
> good co-chair. Thanks, Tobias! However, we need someone to work with
> Tobias, preferably someone with (a) more experience in the Applications
> Area and (b) strong knowledge of HTTP. Please contact me if you're
> interested or you would like to suggest someone else.
>
> 2. Charter. We had some feedback at the BoF about charter revisions,
> especially focusing on the three drafts under immediate consideration
> and removing the text about developing a long-term framework for web
> security. Jeff or Hannes, could you send updated charter text to the
> list for discussion?
>
> 3. Name. Some people have said that "HASMAT" isn't very descriptive of
> the subject matter, and that we might want something like "WEBSEC". As
> long as folks don't think "WEBSEC" means that we'd be working on
> everything under the sun related to the security of the web, I'd be fine
> with a name like that. Other suggestions are welcome.
>
> Thanks!
>
> Peter
>