This wiki has undergone a migration to Confluence found Here
<meta name="googlebot" content="noindex">

Difference between revisions of "July 08, 2014 Security WG Conference Call"

From HL7Wiki
Jump to navigation Jump to search
Line 18: Line 18:
 
||||.||  [mailto:jc@securityrs.com Johnathan Coleman]CBCC Co-Chair
 
||||.||  [mailto:jc@securityrs.com Johnathan Coleman]CBCC Co-Chair
 
||||x||  [mailto:Kathleen_Connor@comcast.net Kathleen Connor]
 
||||x||  [mailto:Kathleen_Connor@comcast.net Kathleen Connor]
||||.||  [mailto:duane.decouteau@gmail.com Duane DeCouteau]
+
||||x||  [mailto:duane.decouteau@gmail.com Duane DeCouteau]
 
|-
 
|-
  
Line 68: Line 68:
  
 
* Meeting Minutes Approval for [http://wiki.hl7.org/index.php?title=June_24,_2014_Security_WG_Conference_Call June 24, 2014]
 
* Meeting Minutes Approval for [http://wiki.hl7.org/index.php?title=June_24,_2014_Security_WG_Conference_Call June 24, 2014]
 +
 +
'''[http://gforge.hl7.org/gf/project/fhir/tracker/?action=TrackerItemBrowse&tracker_id=677&tracker_query_id=4968 FHIR disposition]''' - review/discussion
 +
 +
* ID 3298; Summary Binary resources can be subverted for cross-site scripting
 +
** assigned to Duane to provide thoughts on the implication
 +
 +
Security labels in the http header that may be exposed (submitted by Kathleen) is missing
 +
* if you put the security labels in the body of the FHIR payload, it may not necessarily be in the clear
 +
 +
ID 3350; Summary: Request change to Tag
 +
* assigned to Kathleen; misspell, item should be closed.

Revision as of 21:16, 8 July 2014

Meeting Information

Back to Security Main Page

Attendees

x Member Name x Member Name x Member Name x Member Name
x Mike DavisSecurity Co-chair . John MoehrkeSecurity Co-chair . Trish WilliamsSecurity Co-chair . Bernd BlobelSecurity Co-chair
. Chris Clark . Johnathan ColemanCBCC Co-Chair x Kathleen Connor x Duane DeCouteau
. Reed Gelzer x Suzanne Gonzales-WebbCBCC Co-chair x Rick Grow x David Henkel
. Mohammed Jafari . Don Jorgenson x Alexander Mense . Amanda Nash
. Paul PetronelliMobile Health Security Co-chair x Diana Proud-Madruga . Harry Rhodes , Aaron Seib
. Ioana Singureanu . Walter Suarez x Tony Weida . Paul PetronellimHealth Co-chair
. . . . . . . .


Back to Security Main Page

Agenda

  1. (05 min) Roll Call, Approval of Meeting Minutes
  2. (10 min) Update: Way with Verbs - Tony
  3. (10 min FHIR disposition - review/discussion
  4. (05 min) PSS Patient Friendly Security and Privacy
  1. (05 min) Other business, action items, and adjournment

Minutes Summary

FHIR disposition - review/discussion

  • ID 3298; Summary Binary resources can be subverted for cross-site scripting
    • assigned to Duane to provide thoughts on the implication

Security labels in the http header that may be exposed (submitted by Kathleen) is missing

  • if you put the security labels in the body of the FHIR payload, it may not necessarily be in the clear

ID 3350; Summary: Request change to Tag

  • assigned to Kathleen; misspell, item should be closed.