[glue-wg] Endpoint.TrustedCA and ComputingEndpoint.TrustedCA Inconsistency in GFD147

[stephen.burke at stfc.ac.uk]

JP Navarro [mailto:navarro at mcs.anl.gov] said:
> First I think it's important to confirm that we indeed have NO uses for this
> today. Does anyone know of any?

glite certainly doesn't because GLUE 1 doesn't have the information at all. And it isn't an issue because in practice sites do just install all the standard CAs - partly because most sites support WLCG and they probably insist that all their CAs are allowed by all sites. I can see that there could be special cases where e.g. you have a site with funding specifically for national users, but we shouldn't need to require all sites to publish a large amount of data to support that.

> Discussing a proposed solution, and even coming to a consensus, doesn't
> mean we have to change the current GLUE 2 specification.

The specification was intended to cover it already, so at most I would say that it's a clarification. Revising the specification is potentially possible, but as I've said about other things that's something with a multi-year timescale which can't alter what we have in production now.

Stephen
-- 
Scanned by iCritical.