ITI CPs 2018-19-Agenda and Minutes from past CP calls

ITI domain CPs for 2018-19 are managed here: ITI Change Proposals 2018-19

This page contains the minutes from past CP review calls during the 2018-19 publication cycle.

Current ITI CP status spreadsheet is here

May 24, 2018 - ATNA updates

Attendees: Rob Horn (honorable guest SME), Manuel Metz (ASIP Sante), Joe Lamy (SSA/Aegis), Gregorio Canal (Arsenal.IT), Elliott Lavy (N. Harris Computer), Elliot Silver (Change HC), Dave Vaccaro (lifeIMAGE), Vassil Peytchev (Epic), Lynn Felhofer

(1) Assigned CPs ftp://ftp.ihe.net/IT_Infrastructure/TF_Maintenance/CPs/1_Assigned

-- 1094 - ATNA: Add Option: Require server certificate domain name validation for all traffic over the public internet

-- 1124 - ATNA: Add Option: Non-Downgrading BCP195 TLS Secure Transport Connection

• Discussion points:
  • packaging w/in the ATNA profile --
    • we decided to make two options in 1124: BCP and non-downgrading BCP -- enables individual profiles or deployments to require one or the other
    • ability to turn on/off these options at a deployment; need text w/in Vol 1 ATNA to explain this
    • because of the need to have two separate BCP195 options, we cannot combine all of these enhancements into one 'cyber' option. There can still be messaging associated w/ Connectathon packages these options together.
    • All options in 1094 and 1124 also apply to the Audit Consumer. Both CPs need to be updated to add the options to the Audit Consumer...this is an update to the "Add RESTful Query to ATNA" TI Supplement.
  • compatibility with legacy systems --
    • addressed by separating into two options and adding explanatory text about when to use these options
  • referencing BCP195 which is recommendation / current best practice
    • BCP195 will go through review/update using their normal process; IETF has historically been good at maintaining backward compatibility.
    • If we label the option with a date, it would 'freeze' the definition of this option to the published today
    • Toolkits will follow IETF revisions, reducing the risk of incompatibilities.
    • Thus we decided to remove reference to a specific version of BCP195. The Rationale of the CP will be updated to call this out as an item to comment on during CP Ballot.
  • Next steps for these CPs --
    • CP 1094 -- this CP is approved for Ballot pending Vassil's update to add this option to the Audit Consumer actor. There is no need for the committee to review of these updates prior to ballot.
    • CP 1124 -- this CP remains Assigned. The assignee is unclear. Lynn will send the CP as updated today to John and Charles. Edits needed: Finish updates to Vol 1, particularly addition of explanatory section. Add this option to the Audit Consumer. Review Vol 2a to see if splitting the option results in more text needed. See more detailed notes in version of -03 of this CP in the Assigned directory. If an updated version is ready in time, we will review it during next week's CP call.

(2) Close a few odds and ends from recent CP ballots

• CP 709-06 from Ballot 47 - Accounting of Disclosures audit message
  • No votes were due to ASTM-2147 being 'withdrawn' status. Vassil confirmed that this ASTM E2147 was balloted for reinstatement in April 2018. Lynn will follow up via with those who commented on this CP.

(3) Next in CPs

• Thurs May 31, 10-11am CDT -- If updates to CP 1124 are ready, we will review them. Else we will process the backlog of Incoming CPs.