Date: 2018-11-09

Time: 1415:00-16:00 CEST

Type of meeting: Gotomeeting (https://global.gotomeeting.com/join/704521469)

...

Risto Collanus (Visma / Maventa) eDelivery/TICC CMB

Bård Langöy (Pagero) eDelivery/TICC CMB

Jesper Larsen (Unlicensed) (OpenPEPPOL Operating Office)

...

1. Self signed certificates are not allowed (as mentioned in the PEPPOL AS2 specs)
2. The SSL certificate has to be recognised by both Java and Microsoft since at least 6 months.
3. Grade "A" TLS configuration according to SSL Labs (https://www.ssllabs.com/ssltest)
4. Access points are not allowed to tamper with provided trust lists.
5. Access points A PEPPOL Access Point not graded "A" is seen as considered to be unavailable with regard regards to the Transport Infrastructure Agreement.

Decisions

• The present TICC CMB members (Risto Collanus, Bård Langöy, Hans Berg) unanimously decided to adopt the above policy.

Action items

• Bård Langöy will draft the policy until next week.

Attachments