aboutsummaryrefslogtreecommitdiff
path: root/archive/2022-01-18--meeting-minutes
blob: fafd4a90bb3b1cea66d6806f9f74138684f4c982 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
Date: 2022-01-18 1200 UTC
Meet: https://meet.sigsum.org/sigsum
Chair: rgdd

Agenda
	* Hello
	* Status round
	* Decisions
	* Next steps

Hello
	* rgdd
	* ln5

Status round
	* [rgdd] brought decided proposals into primary documentation
		* branch rgdd/proposals in sigsum repo
		* [x] get-* endpoint proposal
		* [x] domain hint proposal
		* [x] add-leaf endpoint proposal
		* [x] remove arbitrary bytes proposal
			* Note: checksum now refers to a cryptographic hash which has a preimage
		* [x] tree-head endpoint proposal
			* Reflections: https://git.sigsum.org/sigsum/tree/archive/2022-01-18-tree-head-endpoint-observations
		* [x] ssh signing format proposal
			* Note: did not update example values (added todo note and linked proposal)
		* [x] open-ended shard-interval
		* feedback/review wanted before merging
		* added an issue to track implementation of the above
			* https://git.sigsum.org/sigsum-log-go/tree/issues/implement-decided-proposals.md
	* [rgdd, ln5] started sketching on what www.sigsum.org might be eventually
		* https://git.sigsum.org/sigsum/tree/archive/2022-01-18-future-website-sketch
	* [rgdd] start using the terminology "author" and "reader" proposal
		* https://git.sigsum.org/sigsum/tree/doc/proposals/2022-01-author-reader-terminology
	* [rgdd] redefine "base URL" as "log URL" proposal
		* https://git.sigsum.org/sigsum/tree/doc/proposals/2022-01-proposal-log-url
	* [ln5, rgdd] continued work on logotype

Decisions
	* Decision? start using terminology "author" and "reader"
		* No, proposal needs more work
		* Author seems like a good abstraction definition
		* Reader seems less good
	* Decision: redefine "base URL" as "log URL"

Next steps
	* [rgdd] tree-head endpoint implementation, think about replacement for "reader"
	* [ln5] log v0 implementation updates, email list improvements, database redundancy

Other useful links
	* Tor documentation about git integrity, including signing and mentions of tlogs
		* https://gitlab.torproject.org/tpo/tpa/wiki-replica/-/blob/37a3f115f2205b437d2c15c79dd4b903666e270c/howto/gitlab.md#git-repository-integrity-solutions