Policy-Discussion

[Sven Anderson <sven AT anderson.de>]

Hi,

Ian G, 23.02.2007 13:21:
> Bernhard Froehlich wrote:
>> If  "personal standards not matching the official line" are making it 
>> into very official looking documents on the official CAcert website it 
>> indeed sounds like quite a problem to me. How can I know where to look, 
>> just in case I to have a definitive statement? The next time I ask the 
>> same question here I may receive an answer pointing me to the CPS. How 
>> about marking the CPS invalid if it is so?

I agree. I also don't see what process a document has to take to become
"official". What is "official" anyway? What the board agreed upon? What is
adopted by the policy list? As the board is the the only official
institution at the moment, it should bootstrap a process for this. Or
instead bootstrap the CPS when they think it is ready and put it on the
CAcert site, as this CPS is controlled by the policy list then.

> Bernhard, sorry to be so tough on you here but I have to 
> thump the desk!
> 
> *The CPS has to be the definitive statement*.  If it is not 

It _will_ be. It is not yet adopted, or did I miss this?

> If you are suggesting that the CPS -- the Certificate 
> Practice Statement -- isn't definitive then you are saying, 
> in effect, to the rest of the world that:
> 
>        "CAcert is not a CA."

So "CAcert is not yet a CA"?


Cheers,

Sven

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature