Subject: [http-auth] Agenda: Web Payments Telecon - Wednesday, June 5th 2013

From: Manu Sporny <[email-masked]>
Date: Sun, 02 Jun 2013 14:03:42 -0400

This weeks telecon will focus on the HTTP Signatures specification.
Specifically, we will start doing a formal security audit and outline
the remaining work that needs to be completed on the specification. This
will be a 60 minute call.

If you would like to add or change anything on the Agenda, please send
the request to the mailing list before the telecon or mention the
changes at the beginning of the call.

The dial-in information as well as minutes and audio logs of previous
meetings can be found here:

https://payswarm.com/minutes/

==========
Wednesday, June 5th 2013
Time: 1500 UTC / 8am San Francisco / 11am Boston / 4pm London
Digital Bazaar Telecon Bridge
SIP: [email-masked]
Phone US: +1.540.961.4469 x6300
irc://freenode.net/#payswarm
Duration: 60 minutes
Scribes: Manu, Lehn, Longley, others TBD
==========

Agenda

1. ISSUE-7: HTTP Signatures Security Review Process
   * https://github.com/web-payments/payswarm.com/issues/7
2. Passive Attacks
   * Confidentiality Violations
   * Password Sniffing
   * Offline Cryptographic Attacks
3. Active Attacks
   * Replay Attacks
   * Message Insertion
   * Message Deletion
   * Message Modification
   * Man-In-The-Middle
4. On-path versus off-path
5. Link-local

-- manu

-- 
Manu Sporny (skype: msporny, twitter: manusporny, G+: +Manu Sporny)
Founder/CEO - Digital Bazaar, Inc.
blog: Meritora - Web payments commercial launch
http://blog.meritora.com/launch/