Attending: Michael Gettes, Tom Barton, Steve Carmody, Janemarie Duh, Jim Jokl, Mark Scheible, Scott Cantor, Chris Misra, Keith Hazelton, Tom Mitchell
With: Dean Woodbeck, David Walker, Nick Roy, Mike LaHaye, IJ Kim, Steve Olshansky, Ann West, Paul Caskey, Tom Scavo
Discussion of the failed metadata signing process on March 21
Ian is building a tool that will allow publishing of a cache version of metadata if the signing process fails. Also, eduGAIN operations has started to verify what they publish with a separate XML security stack. But this does not solve this specific problem.
Moving to per-entity metadata would eliminate this problem. However, that is a long-term fix. There was discussion of reducing the risk of this happening again.
(AI) Nick will talk with eduGAIN steering group, letting them know the InCommon TAC believes this is a critical problem for the trust platform. Are there things eduGAIN can do to alleviate this risk? Depending on the answer, we may then look at what InCommon can do to protect itself.
A core group has agreed to participate. Nick is still looking for an SP operator to participate. Nick is setting up a poll to agree on a regular call time.
Potential TAC F2F at Chicago I2 Global Summit (Tuesday, May 17, 9-11 am)
(AI) TAC members should develop agenda items that would benefit from a F2F.
(AI) Nick to review/revise the charge based on the discussion on the TAC email list. The WG will not produce a production MDQ. It will propose a plan for rollout - a blueprint - which will be fed into an InCommon plan for creating a production service. There is agreement within TAC that moving to per-entity metadata is the end goal, but there there also needs to be a parallel discussion about a shorter-term solution.
(AI) TAC review this document and identify what want/can do in 2016.
Comments/ideas on priorities for 2016:
(AI) Steve will review the TAC work plan document and resolve comments, then construct a voting spreadsheet and distribute to TAC (target Apr 6 for distribution to TAC).
(AI) TAC - by Global Summit have draft charters for a number of the 2016 work plan efforts.