3 ms·
At $work I maintain and develop a CMDB and the software that is used to manage it. All of this sounds like very familiar data entry and maintenance problems.
by perlgeek 7y ago
At $work I maintain and develop a CMDB and the software that is used to manage it.
All of this sounds like very familiar data entry and maintenance problems.
In general, good data quality can only be achieved by giving the people who enter it some incentives, or make it impossible to enter wrong data (then data can still be missing).
For example, we have automation that configures monitoring and backup for hosts from our CMDB, and this information tends to be well maintained.
Other information that we need e.g. for compliance, but that no automation is tied to, tends to be of much less quality.
The second part is the feedback loop: if you enter some data incorrectly, and weeks or months later somebody complains that it's wrong -- that's too far off to efficiently learn from it.
We as an industry might have expected better from CAs, but we haven't pressured them into building the necessary feedback loops, or indeed given them incentives to provide higher-quality data in the EV certs.
- peterwwillis 7y agoIt would seem that one could develop validation standards for certs that check for data entry errors (and missing data) and apply them at CAs so they can't issue them, and optionally at clients so they can't even accept them
- cat199 7y ago> higher-quality data in the EV certs. Part of this is probably the fact that many people were opposed to the entire concept of EV certs as basically being a money grab by the dominant CA's from day 1, and indeed the trend is away from highlighting their existence in web user agents...