CTI TAC Meeting Notes 2025-03-26

CTI TAC Meeting Notes 2025-03-26

​Present:
  * Carlos O'Donell
  * David Edelsohn
  * Siddhesh Poyarekar
  * Joseph Myers
  * Kris Borchers
    
Agenda:
  * AI: Carlos to find dates where we can have a meeting with Steve (OpenSSF GM).
  * Siddhesh: Started on the OpenSSF sliver and gold badges looking for hardware requirements.
  * Carlos status update:
     * Completed top level PO 1, 2, 3, 4 and 5 writeup. This is 25% of top-level items.
     * Working on PO.1.1 for glibc.
  * Was able to get through PO in ~1 week. Will need to put more hours into the writeup to finish by the end of the month to publish something. Otherwise I need ~3 more weeks.
  * Carlos: Goal is to publish something by end of April 3-4th.
  * Discussed the next items in the documentation and touched on the topic of developer endpoint hardening and MFA keys like Nitro Key.
  * Asked Kris Borchers if there were current OpenSSF initiatives around MFA keys?
  * Joseph noted: https://github.com/ossf/great-mfa-project which is now archived.
  Next steps:
  * AI: Carlos to get dates to send to Kris for a meeting with Steve.
  * Carlos: Publish the top-level and glibc level analysis for April 3-4th.
  * Sid to still review OpenSSF best practices badge gold and silver for hardware requirements.

-- 
Cheers,
Carlos.