Policy-Discussion

[Russell Smith <mr-russ AT pws.com.au>]

The new Assurance handbook http://wiki.cacert.org/wiki/AssuranceHandbook ;
states the following,

50 points: "assured" the name can be added to the cert. The servercerts are 
valid for 2 years. You can get a signed PGP/GPG key. The personal details 
can't be changed anymore.

However I was able to change my name on the website until I got 100 points.

There could be a couple of problems with this, I can get assured by one 
person with one name, change it and repeat the process.  I can be anybody I 
want to be unless I am an assurer.

I'm not sure on the best policy angle and am posting for ideas and 
verification.

Ideas are;

1. Once you have 50 points, you can't change your name or DOB.  So once you 
are assured, that's it. (This mean I could assure you with one name, and you 
get your 50 points with a different name)
2. Once you have > 0 points you can't change your name or DOB.  This means 
you can only be assured under one name for all of your points.  Seems most 
consistent with ensuring the correct identity of a person.
3. Only stop name change abilities at 100 points.  Seems like a bad idea, but 
it's the current website setup.

Regards

Russell Smith