From eb4f9895619b8d5f311a5f467870a98985a5aa96 Mon Sep 17 00:00:00 2001 From: Wolfgang Pempe <pempe@dfn.de> Date: Mon, 10 Feb 2025 11:39:11 +0100 Subject: [PATCH] Edit infraproxy.md, fixed link and added a list item about the NFDI-AAI security list --- docs/infraproxy.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/infraproxy.md b/docs/infraproxy.md index d173f56..75978c4 100644 --- a/docs/infraproxy.md +++ b/docs/infraproxy.md @@ -16,13 +16,14 @@ The Infrastructure Proxy is operated by DFN-CERT on behalf of DFN. For all quest ### Technical Aspects - Make sure that the service supports and is able to consume the Community Attribute Profiles specified in the current version of the [Infrastructure Attribute Policy](policies.md#nfdi-policies) - The connection to the infra proxy is always established via OpenID Connect: - - The configuration URL of the Proxy's OP component: https://infraproxy.nfdi-aai.dfn.de/.well-known/openid-configuration + - The configuration URL of the Proxy's OP component: [https://infraproxy.nfdi-aai.dfn.de/.well-known/openid-configuration](https://infraproxy.nfdi-aai.dfn.de/.well-known/openid-configuration) - For registering a service, we'd need at least one **redirect_uri**, in exchange for a **client_id** and a **client_secret**. - The final integration is usually done in an interactive session (video conference). ### Data Protection, Formal Aspects - Please provide at least a German privacy statement for the service. There are German and English templates available as part of the [NFDI-AAI policy framework](policies.md) - As part of the policy framework, there are also [templates available](policies.md) for Service Acceptable Use and Service Access Policies, which are both optional. If you're planning to make use of such documents, please let us know. +- Provide a security contact for the service and register the email address with the [NFDI-AAI Security List](https://www.listserv.dfn.de/sympa/subscribe/nfdi-aai-security), which is used as incident response information channel. - As official operator of the Infrastructure Proxy, the DFN acts as data processor ("Auftragsverarbeiter") for the operator of the service. A ready-made Data Processing Agreement ("Auftragsverarbeitungsvereinbarung") exists for this purpose. The DFN-Team takes care of the paperwork. ## Contact information -- GitLab