Policy-Discussion

[Ian G <iang AT systemics.com>]

Duane wrote:
> Sven Anderson wrote:

> > BTW: why not putting a certain assurance-level into the certificates,
> > going away from that binary "certified-or-not" principle? We shoudn't run
> > after the "big" CAs, we should just make it better, with new ideas. I
> > guess, if we get popular, just because it works and it's better/more
> > trustful/more transparent than the rest, we will be "in the browsers"
> > faster than we'd prefer.
>
> I mentioned this earlier but no one really gave much/any feedback.


Why would you put it in the certificate?  That would then 
become stale;  surely you are interested in the assurance 
level today, the latest info available, not what happened a 
year back?

iang