Policy-Discussion

[Philipp Gühring <pg AT futureware.at>]

Hi Arnaud,

> Well, I don't work for cacert, nor plan to do so, but this makes
> it seems like it's a spy world you enter when working for cacert :)
> I think the same kind of things apply to the cia... Isn't it a
> little too much ?

Yes, it is taken and adapted from the NSA.
It is obviously not taken seriously completely, but since it is quite funny 
that way, I think it is good as introduction into the high-security world, 
where CAcert definitly needs to go.

We don´t have that high demands on Anonymity of the personnel, on office 
building security, or secure internal telephone systems.
But the need-to-know concept and the secrecy of all the data that we have to 
manage demand good security practices.

Regards,
Philipp Gühring