Policy-Discussion

[Ian G <iang AT systemics.com>]

Lambert.Hofstra AT ins.com
 wrote:

> Before going into further detail on how to create technical solutions to
> solve all these interesting challenges, we (CAcert) probably first have
> to decide whether CAcert will require some kind of dual control, or is
> happy with changes being made a single individual without formal
> approval or audit by another person.
>
> So, who feels that it is acceptable for a single individual to "have the
> keys to the vault"?
> Do we need dual control on critical infrastructure elements and key
> access?


Well, anything's possible!  The Internet ran with one
guy dishing out the numbers and TLDs for decades :)

As a principle of auditing, though, this is a non-starter.

No audit will accept a single individual being in control
of even the tea money.  A basic principle of governance
is "separation of control."

iang