Choose timezone
Your profile timezone:
Token Trust & Traceability WG
→
Europe/Zurich
Description
Token Trust and Traceability WG
https://codimd.web.cern.ch/SWvsgrH3Tqq9g2qOzw-8EA
# TTT 15/9/26
Attending: Jens, Maarten, Linda, Simon, Mischa
Apologies:
## Actions, since last meeting
Last meeting minutes: https://codimd.web.cern.ch/VhGsEwx8QKiiaNntllACxQ
## Outstanding points
## Policy discussion
Document - ML added extensively to introduction.
Do we want to overhaul the text completely?
Need to add an extra section of approved CAs.
ML - make this as forward compatable as possible
Make sure all aspects are supported.
ML - Need to add how VOs are an important to the process.
This policy needs to capture that.
"Default CAs" not sufficient.
Jens points at this is sort of in the current policy, but paragraph is unclear
ML- other considerations are pilots, robots, chain of responsibility.
Jens - risk of acting on bearer token, thing that acts with the bearer token not nessiceryily the subject. Service acting on behalf.
Logging of transactions. Dropping privileges. And using delegation tokens.
But this becomes expensive.
Don't want to make the document too much bigger (no more then 3 pages)
Can drop some bits (like the specific assurance profiles)
Future proofing document could be done by removing operational procedures or "moving target" requirements.
The details could be exposed in a seperate document.
Work on this over the coming weeks/month, to be finalised by the time of the JPWG meeting in December.
## AOB, Next meeting
15.00 CEST 29th September? - Skip in favour of two meetings in October, 13th and 27th.
There are minutes attached to this event.
Show them.