cacert-sysadm AT lists.cacert.org

Subject: CAcert System Admins discussion list

List archive

DNS + OCSP to be critical services under Security Policy

From: Ian G <iang AT iang.org>
To: Wytze van der Raay <wytze AT cacert.org>, Daniel Black <daniel AT cacert.org>
Cc: CAcert System Administrators <cacert-sysadm AT lists.cacert.org>, CAcert Board <cacert-board AT lists.cacert.org>
Subject: DNS + OCSP to be critical services under Security Policy
Date: Mon, 04 Jan 2010 13:34:25 +0100

Wytze and Daniel,

in our meeting last night, we discussed the request of Wytze to move the OCSP and DNS across to the critical services. There was little controversy on whether, but some controversy on when. Either way, the board voted through m20091231.1, following security policy 9.4 "Outsourcing."

This effectively moves OCSP and DNS over to the critical team, but the timings are up to you.

iang

PS: Minutes of the meeting are evolving here:
https://wiki.cacert.org/Brain/CAcertInc/Committee/MeetingAgendasAndMinutes/20100103

=============
https://community.cacert.org/board/motions.php?motion=m20091231.1

Move DNS and OCSP to critical

Resolved that, following Security Policy 9.4, DNS and OCSP are critical
services, and should be run by the critical team according to the full
regime of Security Policy.

Infrastructure team and Markus Kainz are thanked for their years of help
in this.

It is expected that there is a timeline and handover, but no details nor
deadline is set here.
==============

DNS + OCSP to be critical services under Security Policy, Ian G, 01/04/2010