...
| Comment # | Document (Policy / MRPS) | Document line / reference | Proposed Change or Query | Proposer / Affiliation | Action / decision (to be filled in by candidate) |
|---|---|---|---|---|---|
| 1 | Policy | 6.3 | It is not clear who the juristic person of record is or which court has jurisdiction. Reading between the lines, it seems as if this is the Ubuntnet Alliance and thus the Republic of Malawi. It would be useful if 6.3 recorded this unambiguously. (Particularly given section 3 of the MRPS references a contractual relationship with this entity.) | Guy / SAFIRE | This is captured in Section 3 of the policy, but now also made explicit in 6.3 |
| 2 | Policy | 4 | The eligibility criteria for IdPs are very broad and effectively include all countries in the world. It might make sense to limit it to entities with a legal presence in any country in Africa. (Conversely, I would not want to limit SP eligibility in the same way.) | Guy / SAFIRE | Policy document updated with more specificity. |
| 3 | MRPS | 4 | The example registrationAuthority should be updated to reflect the one that will actually be used. | Guy / SAFIRE | This has been fixed in the MRPS |
| 4 | MRPS | references | There's a URL showing as https://www.[AFRICAN-CATCH-ALL]/... which points to the eduID.ng policy. | Guy / SAFIRE | The MRPS reference issue has been fixed |
| 5 | MRPS | links | A number of what appear to be OCR-type "typos" in some of the links in the MPRS, example: bttps-//www edujd afrjca/seryjce-pmyjders | Nicole / InCommon | We are unable to locate the specific issue, but we have updated and validated the document again on this. |
| 6 | Policy | line 256 | The MRPS states that "changes need to be approved by the Governing Body" but the document does not define such a body, only that governance is delegated to the three RRENs. | Alex Stuart / UK federation | The delegation to the three RRENs as “Governing Body" is a management feature to meet the requirements. This “Governing Body” is legally served by Ubuntunet Alliance as per policy statement. |
| 7 | MRPS | line 115 | "Amember'scanonicalnamematchesregistrantinformationshowninDNS" presumably through WHOIS and not DNS | Alex Stuart / UK federation | Ultimately, the registrant information is in DNS. We have added a line: "This information will be retrieved using the WHOIS query tool." |
| 8 | MRPS and metadata | MRPS line 137 and entityID http://drive.ubuntunet.net/apps/user_saml/saml/metadata | The MRPS says that the federation operator will ensure "protocolendpointsareproperlyprotectedwithTLS/SSLcertificates". However, the UA NextCloud Storage Service SP has endpoints that are pan HTTP. The eduid.africa metadata toolchain should consider this an ERROR. | Alex Stuart / UK federation | Entity has been fixed and metadata updated accordingly. |
...