CAcert Code Development list.

[Benny Baumann <benbe AT cacert.org>]

Hi Florian,

Am 03.11.2015 um 08:40 schrieb Florian Lohoff:
> 
> Hi,
> i was taken a Domain (correctly as i left the company) from me.
OT: For company domains it might be worth looking into an Organisation
Assurance. This simplifies the transfer of a domain in case somebody
leaves the company.

> 
> Now i was notified of revocation of all Certificates individually but
> not why.
When a domain changes owners it has to be assumed that all private keys
are known to the previous owner (have a look at the CCA on ownership and
responsibilities of the owner of private keys). Thus when a domain
changes owners it has to be ensured that no certificates the old owner
has access to are still valid.

This revocation can be avoided when using an Organisation assurance.
> 
> I would have expected a Mail
> 
>       "Somebody/User Blah started a Domain Dispute for xyz.tld"
> 
> Then a mail about the success of the Domain dispute and the removal
> of the Domain from the list.
> 
>       "Domain xyz.tld transferred by domain dispute"
> 
> I had an idea what happened so i looked at the list of Domains.
> 
> Flo
> 
I'll put it on the list for discussion in the Software Team.

Kind regards,
Benny Baumann
CAcert Software Assessment Team

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature