CAcert Code Development list.

[Eva Stöwe <estoewe AT cacert.org>]

Hi,


> 
> To add the new fingerprints to CAP-forms etc. it MAY be necessary to
> change one (or more) policies.

no. 

There are no official CAP forms. The ones on the server are just examples.

And there is no policy requirement to add fingerprints to the CAP form.
That would also be senseless, as the CAP form should be kept safe somewhere
with the assurer, who is likely to reference the fingerprint in other ways
as well and who is not meant to look at CAP forms just because of
fingerprints.

If there would be a requirement for fingerprints in context of assurances,
they also would have to be included in blank paper assurances, which is not
the case.


So on, there is no policy requirement about fingerprints on CAP-forms.


It could be sensible to add them as well.

The idea why the fingerprints are on the CAP forms is that the above part
of them is cut of from the form and handed over to the assuree to help the
assuree around. Which regrettably is done seldom, enough.

(It also would be good if the assuree could reference / contact the
specific assurer, especially if something goes wrong with the assurance,
but that is another topic.)

Kind regards,
Eva