[glue-wg] Endpoint.TrustedCA and ComputingEndpoint.TrustedCA Inconsistency in GFD147
stephen.burke at stfc.ac.uk
stephen.burke at stfc.ac.uk
Thu Nov 1 16:49:40 EDT 2012
JP Navarro [mailto:navarro at mcs.anl.gov] said:
> First I think it's important to confirm that we indeed have NO uses for this
> today. Does anyone know of any?
glite certainly doesn't because GLUE 1 doesn't have the information at all. And it isn't an issue because in practice sites do just install all the standard CAs - partly because most sites support WLCG and they probably insist that all their CAs are allowed by all sites. I can see that there could be special cases where e.g. you have a site with funding specifically for national users, but we shouldn't need to require all sites to publish a large amount of data to support that.
> Discussing a proposed solution, and even coming to a consensus, doesn't
> mean we have to change the current GLUE 2 specification.
The specification was intended to cover it already, so at most I would say that it's a clarification. Revising the specification is potentially possible, but as I've said about other things that's something with a multi-year timescale which can't alter what we have in production now.
Stephen
--
Scanned by iCritical.
More information about the glue-wg
mailing list