Committee Meeting 2013-06-23

The meeting will take place at 09:00 UTC in the IRC channel #board-meeting on the CAcert IRC network.

Committee Members: feel free to add a business within the acceptance period or your question to the board below. Others: add a question to the questions section.

Premeeting

  1. Minutes author prepares the minutes from the last meeting

  2. Minutes author prepares the action items. All action owners to update.

  3. Minutes author puts motion m20130616.4 to accept the minutes

Agenda

  1. Preliminaries
    1. Chair opens the Committee Meeting

    2. Accept the minutes from the last meeting.

    3. Who is making minutes?

    4. Chair asks whether cacert-board-private maillist includes any items that need to be disclosed to Members.

    5. Chair asks whether cacert-board maillist includes any business items that aren't on the agenda yet.

    6. Chair introduces the URL of action items to the meeting, and asks for discussion.

  2. Businesses

    Acceptance of Businesses 48 Hours before beginning of Committee Meeting latest!

    1. Oophaga closing down (ongoing)

    2. New Roots & Escrow project (recurring agenda topic until decision reached)

    3. Business added by Your Name Comment: Replace "Business One" by Title of Business and add your Name

      • Additional Inputs Comment: Replace "Additional Inputs"by Description of Business, Description of Reason-Why/Purpose, Additional Comments, Additional Documents, Additional Links, if useful for other Committee Members to prepare for Committee Meeting.

    4. et cetera
  3. Question Time

    Questions from CAcert.org Community Members can be added until beginning of Committee Meeting! As well questions can be asked at "Question Time", without added Question here

    1. Question One added by Your Name Comment: Replace "Question One" by Your Question and add your Name

      • et cetera
  4. Closing
    1. Agree on date of the next Committee Meeting
    2. Chair closes the Committee Meeting

Minutes

1 Preliminaries

1.1 Opening

Present: Michael, Peter, Tomáš, Werner

Meeting chaired by Werner.

1.2 Minutes from last meeting

Minutes accepted by motion m20130616.4.

1.3 Minutes taker

Minutes will be taken by Werner.

1.4 Disclosure of private communication

Nothing to disclose, some discussion about reasons.

1.5 Potential business items on cacert-board

No new business.

1.6 Action items

No discussion.

2 Business

2.1 Oophaga closing down

Nothing new. The MoU waits for singning by the boards of CAcert and secure-u!.

2.2 New Roots & Escrow project

The references in the proposal are related to the "New Roots Task Force" Requirements https://wiki.cacert.org/Roots/EscrowAndRecovery#Requirements. We took the general and the policy based criteria into concern. The audit based criteria are obsolete since the DRC is no longer applicable: https://wiki.cacert.org/Roots/EscrowAndRecovery#Discussion.

Disaster Recovery planning suggests we need to be able to issue CRLs within 24 hours. But we might have a problem to fulfil z.7. when a bank is closed on weekends. A dedicated CRL cert is planned but not yet there. For the record: http://openssl.6102.n7.nabble.com/Offline-Root-CA-and-CRL-generation-td44324.html.

At the moment everybody is mostly happy with this vault-based escrow method, but some essential details must be resolved.

Recommendation from risk assessment: the risk of a compromised bank (a bank does not know what is in their vaults) in a political stable country is lower than the risk of loss of the key by a group of humans (each of them can loose the key and compromise the security of the CA). But there concerns arose how secure is a vault against a malicious bank clerk. The discussion came to no solution. Deferred to next meeting.

3 Questions

No questions.

4 Closing

Next meeting will take place on Sunday 2013-07-07 09:00 UTC.

Motions

Brain/CAcertInc/Committee/MeetingAgendasAndMinutes/20130623 (last edited 2013-07-07 08:47:04 by Werner Dworak)