eDelivery CMB meeting 2023-05-25 minutes
Date: 2023-05-25
Time: 09:00-11:00 CET
Type of meeting: MS Teams
Participants and absents
Chair
@Elly Stinchcombe (Unlicensed) as eDelivery Community Leader
Elected members (with voting right)
@Bård Langöy (Pagero)
@Risto Collanus (Visma)
@Iacopo.Arduini@regione.emilia-romagna.it (Emilia Romagna)
@Arun Kumar Sharma (Basware)
Guests (without voting right)
@Philip Helger (OpenPeppol OO) (apologies received)
@Klaus Vilstrup (OpenPeppol OO)
Agenda
Progress alignment with change and release management based on new agreement change processes
Continue Peppol specification upgrade based on latest version of underlying standard e.g., OASIS
Commence work on future of SML – defining business requirements followed by solution implementation in due course
Documentation of Peppol eDelivery Network Architecture
Ensure and maintain safe & secure operation over Peppol eDelivery Network
Other
Approval of Minutes
eDelivery CMB meeting 2023-05-11 minutes
Status: moved to next meeting
Information/Discussion items
Next meeting Monday (2023-06-06, 9:00 to 11:00 CET
Moved due to overlap with the OpenPeppol GA
Issues
Progress alignment with change and release management based on new agreement change processes
Status and questions around specifications and codelists.
Mostly we believe we are following these processes.
Need to ensure POAC use the same definition of major v minor changes.
Need to ensure good coordination between POAC and eDEC i.e.alignment of codes list release times and alignment of codes.
Do we have a discussion group to coordinate? OO to assist (@Klaus Vilstrup).
Continue Peppol specification upgrade based on latest version of underlying standard e.g., OASIS
Internal WG is in place and work is progressing well with clearly defined scope and outcomes
High level timeline to be developed with some key milestones (while keeping group informal)
Invite to be extended to @Klaus Vilstrup, Klaus talks to @Philip Helger about this group.
Commence work on future of SML – defining business requirements followed by solution implementation in due course
Need to dig out previous commentary from eDec discussions on this topic (on Google Drive – (@Bård Langöy)
BPC have done a POC on a federated/distributed SML – We need details and the results (@Philip Helger was a part of the WG).
Need to ensure we properly understand expectation of MC
Need to define business requirements and understand various options and their pros/cons
Kick this work off once SMP work is done, @Klaus Vilstrup to take the lead
Documentation of Peppol eDelivery Network Architecture
Low priority
Recommend to be done post SMP and SML work
Revisit when ready
Ensure and maintain safe & secure operation over Peppol eDelivery Network
Our BAU work, we need to look at open tickets on this and see what needs to be done
Are we hooked into Security WG? Arun participates irregularly
Interconnected with number 2: Need for an architecture overview of existing and future technologies.
Other
Consider SBDH and XHE? Should this go in SMP WG or run it separately?
What is future state of Peppol Directory e.g. do we make Peppol Directory mandatory and switch from an opt-in to an opt-out process, and is this an eDec responsibility to progress?
Technology review (@Klaus Vilstrup)
Resourcing view (@Klaus Vilstrup)
@Philip Helger - a reminder of the action from last CMB to speak to Didier and ask if he can present the French PoC to the eDEC CMB for 10 to 15 minutes
SPC relevant
Nothing atm
New tasks and Issues (from last meeting)
Issues: https://openpeppol.atlassian.net/issues/?filter=10258
https://openpeppol.atlassian.net/browse/TICC-259
Information: Request to add Participant Identifier scheme 0218
Decision: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-256
Information: Remove participant identifier scheme 9956
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-246
Information: update the SMP digest algorithms from SHA-1 to SHA-256
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-235
Information: Start definining potential actions for removing identifiers in the Code List States Document. Start with TICC-228
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-234
Information: RFC about Ppfuoi changes for PINT - making DDTS officially supported
Update: Approved in last CMB
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-233
Information; Its about a wording issue in the Peppol Envelope Policy (SBDH)
Update: none
Responsible: @Elly Stinchcombe (Unlicensed)
https://openpeppol.atlassian.net/browse/TICC-226
Information: New SMP API proposal (migration code exchange)
https://openpeppol.atlassian.net/browse/TICC-225
Information: New SMP API proposal (health check)
https://openpeppol.atlassian.net/browse/TICC-224
Information: New SMP API proposal (identify)
https://openpeppol.atlassian.net/browse/TICC-223
Information: Collection issue: Peppol, EESPA, BPC
https://openpeppol.atlassian.net/browse/TICC-218
Information: Clarify case sensitivity of Peppol Seat ID
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-206
Information: Number of retries on an AS4 level
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-203
Information: Please add SHA256 XMLsig to Peppol-SMP specs because Java17-security change
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-202
Information: Information about caching of SMP results for usage in a Peppol AP is missing
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-201
Information: Review of new/updated OASIS specifications
Update: none
Responsible: @Elly Stinchcombe (Unlicensed)
https://openpeppol.atlassian.net/browse/TICC-187
Information: Allow 0080 as new Participant Identifier scheme
Update: none
Responsible: @Elly Stinchcombe (Unlicensed)
https://openpeppol.atlassian.net/browse/TICC-184
Information: Align Participant Identifier Scheme Code lists of PoAC and eDEC
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-174
Information: The term "Subject Unique Identifier" in the Peppol SMP specification 1.1.0 requires clarification, as this certificate field is not present in the Peppol certificates.
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-168
Information: Have a separate participant identifier prefix for testing purposes.
Update: none
https://openpeppol.atlassian.net/browse/TICC-167
Information: regarding joint information on news and noteworthy
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-166
Information: Clarification on the words "custom validation" in the AS4 profile was sought.
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-153
Information: https for SMP
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-151
Information: (Whitepaper) Enforce people to use SMK for testing?
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-149
Information: add a Schematron for verifying the AS4 headers. Updates directly in the issue.
Update: none
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-146
Information: (Whitepaper) Creation of the Whitepaper.
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-142
Information: (Whitepaper)
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-140
Information: (Whitepaper)
Responsible: @Philip Helger
https://openpeppol.atlassian.net/browse/TICC-19
Information: Information on how to determine and handle inactive SMP providers
Update: none
Responsible: @Philip Helger
Attachments
none