The Cloud Security Alliance has prepared a publicly available draft of something they call the “Cloud Trust Protocol” and is requesting public comment.
My own take on this is that it is largely a document about service objectives, including measurements and metrics, and should e labeled as that instead of as a “trust protocol”.
The document is available as an editable/commentable Google Doc by filling out the form at the link below. The input deadline has been extended to March 16.
Without pushing any particular OGF technology or approach (although I think this use case is completely covered by WS-Agreement, especially in its RESTful implementations), I would like to encourage you to read the document and to supply the CSA with any appropriate input or comments.
If this is something we need to bring more widely to the attention of the OGF community, please let me know. Please do respond on your own, if you can and prefer, and/or let me know if you think that OGF should send in a more organized response.
Topic:
Cloud Trust Protocol Technical Model
Link:
https://interact.cloudsecurityalliance.org/index.php/ctp/Ctp_tech_model
Alan
