[glue-wg] Call for minor non-distruptive updates to GLUE 2.0

[Sill, Alan]

Hi,

Just addressing this part:

> On Sep 8, 2014, at 2:13 PM, Paul Millar <paul.millar at desy.de> wrote:
> 
> I suggest we:
> 
>  1.    create a registry where people can add CA bundle along
>    with some canonical name,

This type of registry, if created, would be meaningless without secure links to the CA bundles and an accompanying description of policy for each. This in fact is what the IGTF provides for each of its published bundles. 

TACAR maintains a list of individual CAs along with secure links to download their individual CA trust anchor files, but only for a subset of academic CAs. 

I suggest generic language that refers to both as examples.

Alan