*********************************************************************
EUGridPMA Meeting - Karlsruhe 2006-10-06 (after lunch)
*********************************************************************

---------------------------------------------------------------------
Potential new CA issues
---------------------------------------------------------------------

start taking minutes after an important decisions about new appliers
from countries that all ready have accredited CA. :)

---------------------------------------------------------------------
Classic AP updates and MICS editing proposals:
---------------------------------------------------------------------

"should" vs "must": If a ‘should’ or ‘should not’ is not followed, then
PMA make the decision.

Sentence about amount of CAs will be moved to accreditation guidelines

RA must ensure that the requestor is appropriately authorized by the
owner of the FQDN or the responsible administrator

etc.

Classic profile DONE... v4.1
	
---------------------------------------------------------------------
Next meetings
---------------------------------------------------------------------

DavidK & Jens
Mon 15-Wed 17, January 2007	Abbington, UK

Asli
May 30 - June 1, 2007 	Istanbul, Turkey

Christos & Christos
Sept 2007 	Thessaloniki, Greece


---------------------------------------------------------------------
Auditing 	    Yoshio, all

including how to react to 'incidents', and an evaluation of the
"exponent==3" audit.
---------------------------------------------------------------------

There should be a general mailing list (web page with addresses) with
CA's operational addresses for urgent security issues.

Response time must not be more than 3 business days - will be tested
periodically (e.g. every 3 months)


---------------------------------------------------------------------
VOMS issues  (30') 	    Jens Jensen
---------------------------------------------------------------------
(RAL)
I am telling people it's a VOMS problem, but I'm still getting a fair
amount of grief over it, particularly every time I renew the certificate
of some important VO admin...
What I suggest we need to discuss is:
1. A recommended practice for CAs to deal with this problem - which may
well be to inform the right people about it at the right time, and
there's nothing else the CA can do.
2. A general statement to VOMS developers, on behalf of the PMA.


Alan: VOMRS may solve the problems

Jens: will send a bug report

Short term fix:
inform the user to update ...


---------------------------------------------------------------------
Closing
---------------------------------------------------------------------