aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRasmus Dahlberg <rasmus@mullvad.net>2021-11-23 16:38:02 +0100
committerRasmus Dahlberg <rasmus@mullvad.net>2021-11-23 16:38:02 +0100
commitdf179c7c9e7cbe0554088bc62c0c963e0b4a41ae (patch)
tree63d89d2ae0c01850751904fd9bd84336fca5167b
parent0cd11776011a870c225698f0d1095452e85cb1e5 (diff)
added meeting minutes
-rw-r--r--archive/2021-11-23--meeting-minutes47
1 files changed, 47 insertions, 0 deletions
diff --git a/archive/2021-11-23--meeting-minutes b/archive/2021-11-23--meeting-minutes
new file mode 100644
index 0000000..69540fc
--- /dev/null
+++ b/archive/2021-11-23--meeting-minutes
@@ -0,0 +1,47 @@
+Date: 2021-11-23, 1300 CEST
+Meet: https://meet.sigsum.org/sigsum
+Chair: rgdd
+
+Agenda
+ * Hello
+ * Status round
+ * Discuss
+ * Next steps
+
+Hello
+ * rgdd
+ * ln5
+
+Status round
+ * [rgdd] half-baked idea that is related to signing format
+ * https://git.sigsum.org/sigsum/tree/archive/2021-11-23-idea-related-to-ssh-format
+ * [rgdd] sketched on updated meet structure
+ * https://git.sigsum.org/sigsum/tree/archive/2021-11-23-meet-structure-notes
+ * [ln5] continued work on ssh signing format proposal
+ * as discussed in irc we are also considering to move:
+ * shard hint into namespace (leaf)
+ * key hash into namespace (tree head)
+ * pros, especially for leaves:
+ * simplifies tooling
+ * cleaner separation of data and context
+ * can get the "remove arbitrary bytes" proposal for free, see above idea
+
+Discuss
+ * Decision: update meeting structure to s/Discuss/Decision
+ * Decision: start using open-ended shard-interval
+ * https://git.sigsum.org/sigsum/tree/doc/proposals/2021-11-open-ended-shard-interval.md
+ * start next shard when the open-ended shard-interval is tagged in sigsum-log-go
+ * let our current ("completed") shard continue running until the above is fixed
+
+Next steps
+ * [ln5] continue on ssh singing format proposal and deploy next shard when possible
+ * [rgdd] implement open-ended shard interval, if time start defining work packages
+
+Other useful links
+ * [rgdd] additional links from kpcyrd about pacman-bintrans
+ * (Recall: https://github.com/kpcyrd/pacman-bintrans)
+ * Signature index
+ * List that allows mapping signature -> package name after discovery in log
+ * https://pacman-bintrans.vulns.xyz/sigs/
+ * Package index
+ * https://archive.archlinux.org/packages/