Policy-Discussion

[Teus Hagen <teus AT theunis.org>]

What follows is a cut/paste of an email exchange I had with someone (a
CAcert Assurer) who reported that his Assurance Form archive was stolen
(from his parked car).

Question: is there any policy rule on this?

Subject:
Re: Report stolen
From:
Teus Hagen 
<teus AT theunis.org>
....

Problem: (part of) archive of assuree's forms got stolen from Assurer.

My suggested policy: make a report of stolen Assuree's forms (can be
collected and traced by the Assurer from his "trust points list". This
can be done via signed email. If you want to include scanned copy police
report. This is merely a proof that Assurer has taken proper actions.
Assurer should have proof of theft (police report) and Assurer should
keep that police report as well copy of email with traces of those
stolen forms.

So if a check of assuree's forms is needed at some point in the future
there is a track record why they are missing.

This type of policy should be included (if not done already) in the
policy rules.

Web of Trust of CAcert shows here it's strong points.

This is my suggestion of action in this case.

teus

On 05/28/2007 10:42 PM, ... wrote:
Hi X!

Assurer X a écrit :
 
> ....
>
>
> He told me to report to support,
>
> Because I don't have the form's any more with signature.
>
> I lost my complete cacert administration
>
>     
...