Add August meeting minutes 2024-08-21.md

meeting-minutes/2024/2024-08-21.md

@@ -0,0 +1,130 @@
+# 1. Opening Activities
+
+## 1.1 Opening comments (Co-Chair)
+
+## 1.2 Introduction of participants/roll call (Co-Chair)
+Quorum requires participation of 9 or more of the 16 voting members (including the officers).
+
+| First Name | Last Name  | Company                                                     | Role(s)                   | Present |
+|:-----------|:-----------|:------------------------------------------------------------|:--------------------------|:--------|
+| Adrian     | Diglio     | Microsoft                                                   | Voting Member             | No      |
+| Altaz      | Valani     | Individual                                                  | Member                    | No      |
+| David      | Kemp       | National Security Agency                                    | Member                    | No      |
+| Denny      | Page       | Individual                                                  | Voting Member             | Yes     |
+| Duncan     | Sparrell   | sFractal Consulting LLC                                     | Member                    | No      |
+| Feng       | Cao        | Oracle                                                      | Member                    | Yes     |
+| Harin      | Sarda      | Cisco Systems                                               | Voting Member             | Yes     |
+| Jay        | White      | Microsoft                                                   | Voting Member             | Yes     |
+| Jeremy     | Rickard    | Microsoft                                                   | Member                    | No      |
+| Justin     | Murphy     | DHS Cybersecurity and Infrastructure Security Agency (CISA) | Co-Chair                  | Yes     |
+| Kris       | Vandecruys | Cisco Systems                                               | Voting Member             | Yes     |
+| Kunal      | Modasiya   | Qualys, Inc.                                                | Member                    | No      |
+| Langley    | Rock       | Dell                                                        | Voting Member             | No      |
+| Martin     | Prpic      | Red Hat                                                     | Voting Member             | Yes     |
+| Omar       | Santos     | Cisco Systems                                               | Co-Chair                  | Yes     |
+| Pablo      | Quiroga    | Qualys, Inc.                                                | Voting Member             | Yes     |
+| Peter      | Gephardt   | IBM                                                         | Member                    | No      |
+| Przemyslaw | Roguski    | Red Hat                                                     | Voting Member             | Yes     |
+| Shridhar   | Chari      | Cisco Systems                                               | Member                    | No      |
+| Sonny      | van Lingen | Huawei Technologies Co., Ltd.                               | Voting Member             | No      |
+| Stefan     | Arntzen    | Huawei Technologies Co., Ltd.                               | Voting Member             | Yes     |
+| Stefan     | Hagen      | Individual                                                  | Secretary                 | No      |
+| Thomas     | Proell     | Siemens                                                     | Member                    | No      |
+| Thomas     | Schaffer   | Cisco Systems                                               | Voting Member             | Yes     |
+| Thomas     | Schmidt    | Federal Office for Information Security (BSI) Germany       | Voting Member             | Yes     |
+| Tobias     | Limmer     | Siemens                                                     | Member                    | No      |
+
+Regrets:
+
+* Stefan Hagen
+
+Quorum was reached (12 voting members present)
+
+## 1.3 Procedures for this meeting (Moderator)
+
+## 1.4 Approval of agenda
+
+## 1.5 Approval of previous minutes (Moderator)
+
+None (motions carried out already per e-mail motions).
+
+## 1.6 Review of action items and resolutions (Secretary Stefan)
+
+n/a
+
+## 1.7 Identification of TC voting members (Secretary)
+
+n/a
+
+### 1.7.1 Prospective voting members attending their first meeting
+
+### 1.7.2 Members attaining voting rights at the end of this meeting
+
+* Feng Cao
+
+### 1.7.3 Members losing voting rights if they have not joined this meeting by the time it ends
+
+* Langley Rock
+
+### 1.7.4 Members who previously lost voting rights who are attending this meeting
+
+### 1.7.5 Members who have declared a leave of absence
+
+* Stegan Hagen
+
+# 2. Future Meetings
+
+## 2.1 Future meeting schedule (Secretary)
+
+    ```
+    September 18, 2024
+    October 16, 2024 (daylight saving times still active)
+    November 20, 2024 (normal time switch back done, same time on wall clock)
+    December 18, 2024
+    January 15, 2025
+    ```
+# 3. Discussion
+
+The meeting focused on creating definitions for end of sales and end of life, including the need for a generic definition that covers both hardware and software.
+
+* The team discussed creating a definition for software and hardware end of sales, and decided to use one broader definition that covers both scenarios.
+* They identified the need to define the term "vendor" and discussed integrating the concept of "product family" into the schema.
+* There was a suggestion to use "MAY" instead of "can" in the standard, and questions were raised about whether cloud services should be covered by OpenEoX.
+* There is a concern about random CNAs reporting vulnerabilities without discussing them with project maintainers.
+* The definition of "vendor" is being discussed, including the need for an official list and entity claiming product IDs.
+* The end of sales definition excludes open-source projects without sales, and downstream providers may have different end of sales dates.
+- It was discussed whether the definition of "end of sales" should include the last order date, which might be more important for customers.
+
+* When a company is acquired or changes ownership, they should update their OpenEoX documents to reflect the change.
+* The end of sales definition should apply to both software and hardware.
+* There are two types of end of life: one where someone doesn't want to continue and one where they are unable to continue.
+* The meeting discussed the need for a generic end of life definition that covers both hardware and software.
+* The team agreed to remove the software part from the proposed definition and focus on a generic end of life definition.
+
+## 3.1 Next steps
+
+* Keep on discussng on GitHub and mailing list
+
+# 4. Other Business
+
+None
+
+# 5. Resolutions and Decisions reached (by 10 minutes prior to scheduled meeting end)
+
+## 5.1 End debate of other issues by 10 minutes prior to scheduled meeting end and follow the agenda from this point (Co-Chair)
+
+## 5.2 Review of Decisions Reached (Secretary)
+
+## 5.3 Review of Action Items (Secretary)
+
+None
+
+# 7. Next Meeting
+
+  ```
+  Sept 18, 2024 09:00 PDT / 12:00 EDT / 18:00 CEST / 16:00 UTC for 1 hour
+  ```
+
+# 8. Adjournment
+
+Meeting was adjourned.