Policy-Discussion

[Duane <duane AT cacert.org>]

Ian Grigg wrote:
> On Wednesday 20 July 2005 20:55, Philipp Gühring wrote:
> 
>>Hi,
>>
>>
>>>>However I was able to change my name on the website until I got 100
>>>>points.
>>
>>Problem is already fixed. I had already changed the Assurer Handbook that 
>>it 
>>states 50 points, because I thought it might be changed to that. But I will 
>>change it now to reflect the new policy. Thanks for pointing it out.
>>
>>
>>>Which sort of implies that the name does not leave
>>>the organisation, therefore the name is an internal
>>>datum only?
>>
>>No, the user can decide, whether he wants an anonymous certificate (without 
>>the name), or a personal certificate (with the name in it).
>>
>>
>>>Is there any document that describes this?  I'm new
>>>to CACert dox so would appreciate a pointer to this.
>>
>>I am not sure, whether that specifically is documented somewhere explicitly 
>>yet.
>>Does the sourcecode count for you as documentation? ;-)
>>
>>Could you try to rephrase the question you want answered more specifically?
> 
> 
> 
> CACert is collecting a lot of information on people.
> That information becomes a bit of a datamine when
> there is enough of it.  What system or policy is in
> place to protect the information?

Yet another policy that needs to be created, there is a lot of things
that occur that needs a policy written for it.

> There is a reason you are collecting all this information.
> Why is that?  What is the reason you have to have my
> name and my dob on file?

Data points to uniquely identify people as govt issued ID and other
things aren't a good way to uniquely identify people, nor something
desirable to keep on file either, so it's a case of damned if you do and
damned if you don't...

But for other people to verify IDs there needs some unique key fields to
enable them to do this.

-- 

Best regards,
 Duane

http://www.cacert.org - Free Security Certificates
http://www.nodedb.com - Think globally, network locally
http://www.sydneywireless.com - Telecommunications Freedom
http://happysnapper.com.au - Sell your photos over the net!
http://e164.org - Using Enum.164 to interconnect asterisk servers

"In the long run the pessimist may be proved right,
    but the optimist has a better time on the trip."