XSF Discussion - 2022-02-08

larma: the warning can be missed when linking to a specific part!! https://larma.de/xeps/xep-0353.html#intro

mathieui, now you are overengineering things.

> https://larma.de/xeps/xep-0353.html#intro Could you please make that "preview" label more flashy and distracting

I could've sworn there was an RFC for the TLS verification strategy with SRV records in play

i.e. iff DNSSEC, allow only the destination hostname in the certificate, otherwise require the service name in the certificate

DNA?

https://datatracker.ietf.org/doc/html/draft-miller-xmpp-dnssec-prooftype#section-4

https://datatracker.ietf.org/doc/html/rfc7712#section-6

oh

that's XMPP specific?

Anyone else taking SRV records and security seriously? ✏

Zash: Thanks for the adding of RFC6331: https://hg.prosody.im/trunk/rev/2390837b8358 It is really important for SCRAM, to explain people, developers, server admins. I have been promoting this RFC for a very long time.

MattJ, dwd, ralphm - can you confirm we don't have anything like an official Google XSF account already?

For what purpose would we have such an account emus ? They're typically bound to an individual, not an organisation, as far as I know.

Yes, but for GSoC application it could make sense, right?

We might be talking about different things.

No, I dont think so

I was thinking to create somthing like: xsf@gmail.com - with that account I do the application

not good?

From past experience, applying to participate is done by an individual. Google also facilitates distinct individuals to have roles in the process. This worked pretty well in the past.

You can't do it with a @xmpp.org email?

Maybe a more global account would also work, but I am not immediately seeing a major benefit or need for it.

what guus said

If anything, it's a other resource that we need to manage.

I'm not opposed to having such an account at all. I'm just not seeing much of a benefit. If you do see one, by all means, go for it.

well, the only thing is for me to prevent to deal with a private account at Google 🙂 I think registrations requires a google account - let me check again

Interacting with Google requires a Google account. Is this news to you?

Well, wait - maybe not. Yes of course, I expected it

If you are participating in GSoC then having a Google account requirement seems acceptable

But I am aware that opinions may vary on that. 😊

🙂

https://jabbers.one:5281/upload/9AkhpmWYmpf_loGd/54afe12a-9510-4cb8-9826-5e59ce47ce9f.png

"Google möchte aus Sicherheitsgründen Ihre Identität bestätigen. Google sendet Ihnen eine SMS mit einem 6-stelligen Bestätigungscode. Hierfür fallen Standardgebühren an." arrgggg 🤣️

I'm gonna use my spam number, ok

Yes, Google admins need to use their personal Google accounts to sign up and manage everything. We shouldn't use an XSF account for this.

Not just an email? Like I can log into Microsoft with my personal email on my own domain that I host myself ✏

Yes, it's the same thing, you don't have to have a gmail address associated with it, but you do have to have a Google Account.

It's this way for all their services (except gmail, I assume, that one you probably have to have a gmail address for)

That seems ok...

Kev, Sam - they allow to use another email adress if you check the buttons carfully

Corporate-type subscriptions allow you to register any domain name.

so I did and I am registered

Do you want me to proceed. I assume this shouldn't be a problem right?

@board, mattj, ralphm, arc, jcbrand: For your information: https://summerofcode.withgoogle.com/terms/org I am reading them and as long as I don't see any issues from my perspective I will accept.

Your own mail address, but you still need a Google account, no?

Ah, yes

I used the comm-team email

but the account name is XMPP Standards Foundation - ok?

You're entering into personal agreements with Google, if it's the same as previous years.

Wasn't that one already a Google account? Pretty sure someone created one at one point to be on the youtube channel

At least in previous years, it needs to be a personal Google account entering into personal agreements with Google, as well as agreeing that you have the right to enter the organisation into agreement with Google.

I do know they replaced their systems this year, but it seems likely that's still true.

4.7 Participants can access, update, and remove their personal information in their Program profile. I wonder if they are really so harsh

Kev, do you see any issues with the terms? Should I proceed and do you think they will claim the name to be personal if they see it or is that a risk they do not accept us?

So it should be fine to join with a generalized email. Once mattj reacts I will send him the credentials

https://jabbers.one:5281/upload/bLqXvIjqba3uN3uX/7c0f5be2-4173-44c6-b572-7efbe165fb9c.png

If you don't want to have a personal google account, it might be best to instead have someone else submit the application. After all it's not important who exactly submits the application. And you can still help wording the application texts.

We have an account now, it worked

Board, see also: https://summerofcode.withgoogle.com/rules https://summerofcode.withgoogle.com/terms/member

Organization Administrators. Role. Each Organization must have at least two (2) Organization Administrators.

I'm the wrong person to ask about terms, I don't have any say here.

ok, thanks