CTI TAC Meeting Notes 2024-01-31

CTI TAC Meeting Notes 2024-01-31

Present:
 * Carlos O'Donell
 * Joseph Myers
 * Siddhesh Poyarekar
 * David Edelsohn
 * Ryan Day (LF IT)
 * Konstantin Ryabitsev (LF IT)
 * Ian Kelling (FSF)
 * Adrianne Marcum (LF OpenSSF)
 * Bennett Pursell (LF OpenSSF)

Regrets:
 * Nick Clifton
 
Agenda:
 * LF IT Key Exchange protocol.
  * https://lore.kernel.org/cti-tac/20231130-hopping-innocent-labrador-40d2ab@nitro/
  * Konstantin: How do verify them if they are not familiar with them?
  * Adding trusted introducers in this CTI TAC meeting would add as access request certifiers.
  * Recommend: At least 2 trusted introducers handling the process of key changes or additions, removals of trusted introducers.
  * Joseph: What protocol gets used for adding committers?
  * Konstantin: No, you decide the process by which the community will onboard new committers.
  * Carlos: CTI TAC needs to decide how to decide how trusted introducers are removed or added later.
  * Carlos: I'll ask the TAC members present.
  * David Edelsohn: No questions. OK being a trusted introducer for CTI TAC.
  * Siddhesh Poyarekar: No questions.  OK being a trusted introducer for CTI TAC.
  * Conducted LF IT key exchange for Siddhesh, Carlos, and Joseph to be setup as trusted introducers.
  * AI: Carlos will setup another meeting for David Edelsohn and the rest of the CTI TAC to add David as a trusted introducer.
  * AI: Siddhesh, Joseph, and Carlos to email keys to [email protected].
 * glibc steward vote update - Ryan Arnold voted Yay for use of CTI services.
 * Previos meeting AI: Carlos to reach out to overseers to clarify if they have registered any typo-squatted domains.
  * https://sourceware.org/bugzilla/show_bug.cgi?id=31098
  * Yes, toolchain.dev had been registered as part of the GNU Assembly discussions.
  * Carlos: I notified Mark that they did not need to worry about typo-squatting because we're using a different domain.
 * Konstantin: BBB password reset is to upgrade to v3. There are some issues that happen.
  * Carlos: There are 3 meetings that are probably 40-60 accounts.
  * Siddhesh: No objections to recreating accounts.
  * Ian Kelling: FSF hasn't migrated yet.
  * Joseph: No objections.
  * David: No objections.
 * Bennet: What are the timelines for setup?
 * Carlos: Feb 12-16 writing.
 * Carlos: February setup of website and Paul Eggert.
 * Carlos: Joseph and David can you review TAC docs in February?
 * Joseph/David: Yes, can be available.
 * Febrary CTI TAC meeting should be about glibc status and services timeline.
 * AI: Carlos to raise again on list with Alexander that we are following the GNU Ethical repository hosting criteria.
 * Adrianne: March 19th present to OpenSSF TAC.
 
-- 
Cheers,
Carlos.