Re: [OAUTH-WG] Second OAuth Security Workshop (Call for Papers)

John Bradley <ve7jtb@ve7jtb.com> Mon, 13 March 2017 20:01 UTC

Return-Path: <ve7jtb@ve7jtb.com>
X-Original-To: oauth@ietfa.amsl.com
Delivered-To: oauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8AE8129B02 for <oauth@ietfa.amsl.com>; Mon, 13 Mar 2017 13:01:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ve7jtb-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2_35l8XwPIKY for <oauth@ietfa.amsl.com>; Mon, 13 Mar 2017 13:01:47 -0700 (PDT)
Received: from mail-qt0-x22d.google.com (mail-qt0-x22d.google.com [IPv6:2607:f8b0:400d:c0d::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B144129AFD for <oauth@ietf.org>; Mon, 13 Mar 2017 13:01:45 -0700 (PDT)
Received: by mail-qt0-x22d.google.com with SMTP id x35so40691873qtc.2 for <oauth@ietf.org>; Mon, 13 Mar 2017 13:01:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ve7jtb-com.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=qEFzlGwTGGPklDKCLCTXADBAi4wjki1fe1RX7rwoK/g=; b=J92Lu0iXtYr2s2YEtZH1SqdqCx5veC8PpXsyCLIblLh2TnEOZPsxhU2XIls6uqiMWw YKM6iYQq1WUr8liMZj6YxCI4Ic7W+RM+1zbj5UX5m0v8aLiwUvL87osG/BJIWTi9CQiz ISRGSsXJ6YClTKFYJmpHC91Gq0f7DVL4klfl0H6NFTE63o1U/uzCwuy0s52bUjJshRvM ZR3iAf0OAiuSsXoQ+/2TWKM4PphPADiYfSaqvmgDbnFBo3X6o8s9yiBnqw6f+ZIW63uN MtoCRup3j2o5gGVgn6dhP1gZl9+df2qsIUZC+oEJG8MKYsg8isuyNEOOCTB0V2SEYCBF B3AA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=qEFzlGwTGGPklDKCLCTXADBAi4wjki1fe1RX7rwoK/g=; b=QiZIOwmBtiRdVk3CG67f8cG1b9+LigItz7QoX5gj5yfjTy4zwPJtYFZE74+vR/HiOL 24UusNBED9K33OI2oHZHLxUBV/2igxFEy2G1OLQZNKYWRTrGw67yivg07ofCEa5bP75I /59gvvAP3FMU/dCUzOg3++yPrBjcp6l+XHfr1JdK4XvAjxq+FUu2os/6sZyp2E1RN//C enyXTLlWS9JoVk2mkH60poGO2q0mS9dXvaxjROlWHYxwnuJN3Thu9qRpFpdGo8khMWCi XSepeXXwCX5rFEi33SeNLltUlBi5f37E0LK2h8nH4821ou880/2kxRpkANNLCKlNG/Jn qfFQ==
X-Gm-Message-State: AMke39nlACrQ7hS4rwPuQNQTAeVVVgi+SJ625KtJpcJ7UrDpFu8nsMu+LAE30Tf8BUmPMVZn
X-Received: by 10.200.58.101 with SMTP id w92mr36991599qte.292.1489435304036; Mon, 13 Mar 2017 13:01:44 -0700 (PDT)
Received: from jbradley-r.lan ([191.115.39.204]) by smtp.gmail.com with ESMTPSA id i125sm12858801qkf.52.2017.03.13.13.01.36 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 13 Mar 2017 13:01:42 -0700 (PDT)
Mime-Version: 1.0 (Mac OS X Mail 10.2 \(3259\))
From: John Bradley <ve7jtb@ve7jtb.com>
In-Reply-To: <269DD0EC-FCBF-4691-9BAA-2B8F144C0353@lodderstedt.net>
Date: Mon, 13 Mar 2017 17:01:26 -0300
Message-Id: <3A9170DD-0861-478D-A9DD-9A55DC930B8D@ve7jtb.com>
References: <ed9a8430-5c80-6be3-8b5d-1759c4218919@lodderstedt.net> <BN6PR21MB05003786286B93ECF604D923F5220@BN6PR21MB0500.namprd21.prod.outlook.com> <269DD0EC-FCBF-4691-9BAA-2B8F144C0353@lodderstedt.net>
To: Torsten Lodderstedt <torsten@lodderstedt.net>
X-Mailer: Apple Mail (2.3259)
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-256"; boundary="001a114fd9083c1de7054aa22e8a"
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/CLbBFOWRDpwmDa55Bi1NRfe8ZOs>
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] Second OAuth Security Workshop (Call for Papers)
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/oauth/>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Mar 2017 20:01:50 -0000

I did point out earlier when I discovered the dates, that I similarly asked for it to be later in the week.
It is probably fine for Europeans but it will stop many people from being able to attend including myself unless I can come up with other meetings in Europe to fill those days.

If we cant move it then we will have to live with it and attend or not.

John B.

> On Mar 13, 2017, at 4:46 PM, Torsten Lodderstedt <torsten@lodderstedt.net> wrote:
> 
> Hi Mike,
> 
> yes, those are the right dates. There are restrictions from the host's side, that’s why the workshop needs to take place on Monday and Tuesday. As far as I remember the host was clear about that from the beginning. 
> 
> best regards,
> Torsten.
> 
>> Am 12.03.2017 um 22:15 schrieb Mike Jones <Michael.Jones@microsoft.com>:
>> 
>> Are Monday-Tuesday, July 10-11 really the right dates?  I'm asking because IETF in Prague doesn't start until Sunday, July 16th.  That leaves 4 days dead time in between for those of us who are attending both.
>> 
>> When I was first told about this workshop, I was told that it would be sometime Wednesday-Friday that week.  Can it be moved back to those dates?  That would be a big help for those of us travelling distances to attend.
>> 
>> Or is there also another event in the Wednesday-Friday timeframe that people should also be considering attending?
>> 
>> 				Thanks,
>> 				-- Mike
>> 
>> -----Original Message-----
>> From: OAuth [mailto:oauth-bounces@ietf.org] On Behalf Of Torsten Lodderstedt
>> Sent: Sunday, March 12, 2017 12:28 PM
>> To: oauth@ietf.org
>> Subject: [OAUTH-WG] Second OAuth Security Workshop (Call for Papers)
>> 
>> Hi all,
>> 
>> the OAuth WG and the ETH Zurich will organize another workshop on OAuth security (after the one last year in Trier).
>> 
>> Please find the Call for Papers below.
>> 
>> kind regards,
>> Torsten.
>> 
>> C a l l     F o r     P a p e r s
>> 
>> Second OAuth Security Workshop (OSW 2017)
>> 
>> Zurich, Switzerland -- July 10-11, 2017
>> 
>> WWW:https://zisc.ethz.ch/oauth-security-workshop-2017-cfp/
>> 
>> ===============================================================================
>> 
>> Overview
>> 
>> The OAuth Security Workshop (OSW) focuses on improving security of the OAuth standard and related Internet protocols. This workshop brings together the IETF OAuth Working Group and security experts from research, industry, and standardization to this end. The workshop is hosted by the Zurich Information Security and Privacy Center at ETH Zurich.
>> 
>> While the standardization process of OAuth ensures extensive reviews (both security and non-security related), further analysis by security experts from academia and industry is essential to ensure high quality specifications. Contributions to this workshop can help to improve the security of the Web and the Internet.
>> 
>> 
>> Scope
>> 
>> We seek position papers related to the security of OAuth, OpenID Connect, and other technologies using OAuth under the hood.
>> Contributions regarding technologies that are used in OAuth, such as JOSE, or impact the security of OAuth, such as Web technology, are also welcome.
>> 
>> 
>> Important Dates
>> 
>> Position paper submission deadline: May 2, 2017 (AoE, UTC-12).
>> Author notification: May 15, 2017.
>> Registration deadline: June 16, 2017.
>> Workshop: July 10 and July 11, 2017.
>> 
>> 
>> Invited Speakers
>> 
>> Cas Cremers, University of Oxford
>> 
>> 
>> Submission
>> 
>> We welcome position papers that describe existing work, raise new requirements, highlight challenges, write-ups of implementation and deployment experience, lessons-learned from successful or failed attempts, and ideas on how to improve OAuth and OAuth extensions.
>> 
>> Position papers submitted to the OAuth Security Workshop may report on
>> (unpublished) work in progress, be submitted to other places, and may even have already appeared or been accepted elsewhere.
>> 
>> Submissions must be in PDF format and should feature reasonable margins and formatting. There is no page limit, but the submission should be brief (ideally not more than 3-5 pages). Submissions should not be anonymized.
>> 
>> Submission Website:https://easychair.org/conferences/?conf=osw17
>> 
>> 
>> Publication and Presentation
>> 
>> One of the authors of the accepted position paper is expected to present the paper at the workshop.
>> 
>> All presentations and papers will be put online but there will be no formal proceedings. Authors of accepted papers will have the option to revise their papers before they are put online.
>> 
>> 
>> IPR Policy
>> 
>> The workshop will have no expectation of IPR disclosure or licensing related to its submissions. Authors are responsible for obtaining appropriate publication clearances.
>> 
>> 
>> Program Committee
>> 
>> Chairs
>> David Basin (ETH Zurich)
>> Torsten Lodderstedt (YES Europe)
>> 
>> Members
>> John Bradley (Ping Identity)
>> Ralf Küsters (University of Stuttgart)
>> Chris Mitchell (Royal Holloway University of London) Anthony Nadalin (Microsoft) Nat Sakimura (Nomura Research Institute) Ralf Sasse (ETH Zurich) Jörg Schwenk (Ruhr University Bochum) Hannes Tschofenig (IETF OAuth Working Group Co-Chair)
>> 
>> _______________________________________________
>> OAuth mailing list
>> OAuth@ietf.org
>> https://www.ietf.org/mailman/listinfo/oauth
> 
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth