Committee Meeting 2024-12-05 19:00 UTC

The meeting will take place at 19:00 UTC at https://meet.jit.si/cacert If you do not have audio channel, you may try in the IRC channel #board-meeting on the CAcert IRC network.

Feel free to add a business item within the acceptance period of 48 hours or your question to the board below. Non-committee members: the committee may choose to convert any business proposed as a question in the questions section.

<!> Normal Time: 19:00 UTC = 20:00 CET (Geneva) = 14:00 EST (New York)

Agenda

Signs that appear in the agenda
<!> Formulated motion on your topic. It will be put to the vote. Adjustments may be made before the vote. A motion must be submitted for resolutions!
{i} Information for your attention. Does not need to be explained or discussed at the meeting. Purpose: Everyone is up to date. (max. 10 seconds)
(!) Discussion topic with or with no decision.

  1. Preliminaries
    1. Chair opens the Committee Meeting
    2. {i} Who Secretary is making minutes ?

    3. <!> Accept minutes from 7. Nov. 2024 <!> "I move to accept the minutes of the committee meeting of 11th of Nov 2024."

    4. Chair asks whether cacert-board-private or cacert-board maillist or Threema chat or Telegram group includes any items that need to be disclosed to Members.

    5. Agree on the 2nd of January 2025, 19:00 UTC as date for the next committee meeting. (Following dates probably 6th of Febr., 6th of March 2025)

  2. Business
    1. OpenID Connect (Brian, Dirk)

    2. (!) "I see double" (Etienne)

      1. Result of analysis from Aleš, Kim, Dirk, Jan
      2. Maybe report of meeting/call Dirk in Spain
      3. Next steps
    3. OrgA (Aleš, Alex, Dirk)

      1. Who is in charge of bilateral next steps?
    4. Support Support

      1. (a) OpenID @wiki & @blog; (b) Let's Encrypt @wiki & @blog

      2. To delete accounts of users who are org-admins, any rule, arbitrator act, or a technical intervention is needed. --> who is in charge of documentation?

      3. To delete some accounts, the software repair should be completed. --> Report of Dirks investigation.

    5. Any other business (board members forgot to ask the secretary to put it on the agenda)
  3. Question Time

    Questions from CAcert.org community members can be added until beginning of committee meeting! As well questions can be asked at "Question Time", without added question here.

    1. "Question One." added by Your Name Comment: Replace "Question One" by your Question and add your name

1. Closing

Priorities 2024/2025

OpenID Connect (WordPress!, Matrix?, Nextcloud?)

Brian, ...

ongoing

CPS (a PolG; b New Signer; some work already done by Jan)

(a) Kim, (b) Jan

starting

TTP*

Remote assurance*

More new assurers*

New point calculation (re-view WebDB; 2xreview; implement, https://bugs.cacert.org/view.php?id=1054 https://bugs.cacert.org/view.php?id=1042)

Push OrgA


  1. on hold (for later this year)
    1. Infrastructure: (Dirk)
      1. Start thinking about planning when to do things about new roots, so we are prepared several years in advance, as no certs should have a end-date after any root certificates. Also take a look at the old Escrow article. https://wiki.cacert.org/Roots/EscrowAndRecovery

    2. Remote Assurance (Brian)

      1. {i} Creation of remote assurance sub committee (RASC) on the hold until Eva is available for the policy. Secretary got in touch with Eva on Oct. 12.
        "Users Requests, summarized." added by Aleš a) need for a distant assurance (no assurers, no TTP possibility in their country); b) need for the write access to our Wiki.


  1. To remember: Goals 2021/2022 (propositions by board 2020/2021) - Each goal needs a responsible person on the board who keeps an eye on it and reports regularly, keeps in touch with the responsible people. {X} obsolete / (./) started / {OK} waiting for available time

    • push OrgA (Guy)
    • expand PR (Alex cannot do this, wants to hand over)
    • (./) delivering the OpenID Connect integration, for which CAcert is funded by the RIPE NCC.

    • (./) expand background check

    • {OK} remote assurance, if accepted by the community;

    • (./) simplify the certificate creation (this enables the start of various projects from the pipeline)

    • software development and testing
    • (./) New CSR software

    • {X} support SecureU (find an active board member for them in Germany)

  2. Not to forget: Staffing the teams
    1. Applicants to the Infrastructure team
    2. Applicants to the Development team
    3. Applicant to the Critical team

  1. Access to local systems for board members

Person

Board-Private

Committee Archive

Wiki

Nextcloud

Brian

(./)

(./)

(./)

(./)

Etienne

Admin

Admin

(./)

(./)

Kim

(./)

(./)

(./)

(./)

Michael

X

(./)

<!>

(./)

Aleš

(./)

(./)

(./)

(./)

Dirk

(./)

?

(./)

?

Wacław

X

(./)

<!>

?

FrédéricD

X

(./)

(./)

Admin

FrédéricG

X

(./)

(./)

(./)

1. Tasks assigned to Board Members and others

Person

Task

Deadline

Other People Involved

Notes

Brian

Contact QA/QC Volunteers

10 January 2022

Gero Treuner, Peter Nunn, others?

To begin work, they do not need ABC.

Brian

bla

2022

xxx

xx.

Brian

bla

2022

xxx

xx.


  1. Software Team
    1. Issue 1502: Adapt the UI at CAcert.org to deal with the "keygen" feature having been removed in browsers (Some of this will be met with 1551 )

    2. Issue 1482: Limit validity period of new HTTPS certificates to one year

    3. Issue 1444: PHP - Brian

    4. Issue 1417: Keygen / new CSR software - Bernhard

  2. Organisation Assurance
    1. How to relance OrgA? (Guy)
  3. Grant applications
    1. Protopype Fund https://prototypefund.de/en/ (mail to SW Board only)

      1. The Prototype Fund is a project of the Open Knowledge Foundation Germany, funded by the Federal Ministry of Education and Research (BMBF). This is for residents of Germany only. We could create a group of people that work on a project for CAcert (with all support of the others in the background). It runs for two more years, every 6 month.
      2. Infra does not see any acute need at the moment, and does not have the capacity to provide qualified support.
      3. There are some ideas for software, but in infra's view there is still a lot of conceptual and preparatory work missing. What Infra could imagine is financing people to carry out a requirements analysis and write a requirements and test specification. This could then be used as a basis for a new implementation of the CAcert software (WebDB, Signer and perhaps other things like CATS). But these are just a few ideas of JanDD and he cannot currently recommend any people who would be suitable for this. Potential candidates would have to deal intensively with the existing software on the one hand and with the underlying policies on the other, and would have to identify a lot of missing information, ask for it and make assumptions for discussion. This requires very good analytical and communication skills and a high level of stamina.
  1. Blockchain
    1. see here: https://wiki.cacert.org/Brain/CAcertInc/Committee/MeetingAgendasAndMinutes/2018-03-01/ideas#Blockchain (waiting for answer from IanG)

Minutes Committee meeting - 2024-12-05

Present, by alphabetical order: Aleš, Brian, Etienne, Kim; appologies: Dirk

Opening

The president opens the Committee Meeting at 19:15. The minuts of the last meeting were accepted (m20241205.1). The committee agrees on the 2nd of January 2025, 19:00 UTC as date for the next committee meeting. (Following dates probably 6th of Febr., 6th of March 2025)

Business

2.1. OpenID Connet: no information from the side of Brian, maybe from Dirk (not present)

2.2. "I see double": The analysis will be done until the end of this year by Kim, Aleš (another try as he did not receive the confirmations mails, support's view), Dirk (technical view). Reports have to be given on January 2nd, 19:00 UTC.

2.3. OrgA: Alex is Admin, maybe he has some special rights. Dirk is OrgA for SecureU and CAcert. Reactivation on bilateral base. Etienne will get in touch with Alex. If that does not work, he has to get in touch with the group members.

2.4.1. OpenID @wiki & @blog; (b) Let's Encrypt @wiki & @blog: There are no information at the moment, as Dirk is not present.

2.4.2/3. Delete accounts with OrgA and Software repair: Aleš wrote in the wiki and commented to Jan's scripting.

2.4.4. CPS: Aleš did a lot of work. see http://alkas.org/CPS-WIP/ It should be more guidelines to help us then restrictions.

2.5. Everithing we forgot: There are some ideas to spread CAcert in the world: (a) a project for JOTA/JOTI (https://www.jotajoti.info), the internet jamboree of the internation scout movement (Etienne discovered JOTI this year with his son; Brian was wolf cub, Kim cub and scout - 3rd weekend in october). We will look for some CAcerts scout just for this project that not board members have to do the work. (b) Internet Safer Day (always in february; Kim is involved). (c) Etienne started to create a teacher's manual for the https://wiki.cacert.org/PoJAM (CAcert Junior Program) and a manueal for students. This works could/should be finished with some more involved (teachers, parents, ...)

The president closes the meeting at 20:58.

Motions

Actions

Who

Status

Action

Minutemaker

wip

prepare Agenda and Minutes for the next meeting

Brian

Software meeting

every 2 month

Secretary

bank

accounts, contact with treasurer


Brain/CAcertInc/Committee/MeetingAgendasAndMinutes/2024-12-05 (last edited 2024-12-05 21:07:20 by EtienneRuedin)