Policy-Discussion

[Gary Lee Adams <gla AT iag.net>]

====

Reference:

    Subject:   Re: [CAcert-Policy] What to do if the Assurance
               Forms archive is stolen from an Assurer
    Date:      Tue, 29 May 2007 23:10:18 -0300
    From:      Evaldo Gardenali 
<evaldo AT gardenali.biz>
    To:        Policy-Discussion 
<cacert-policy AT lists.cacert.org>

> One could mail the ones that were assured by said person and ask them
> to get more assurances as they are going to lose said points soon,
> and then they can replace the "grey" points with good ones.

Why?

We have an assurer who has lost some forms and as a result of his
*honesty* in reporting that loss, we're going to punish those he assured
by taking points away from them and make *them* search out other
assurers in their area -- if any -- to obtain replacement points?

I see no logic in that at all.  I'd rather see us develop a policy that
doesn't penalize the innocent.

    1.  Thank the assurer for being open, aboveboard, and honest
        in immediately telling us what happened.

    2.  Help him change his identity (CAcert registered name and
        e-mail address) in some fashion so someone else can't
        attempt to use his old identity in an attempt to falsely
        assure someone.

    3.  For those individuals who our honest assurer gave trust-points,
        automatically change their records to show their points were
        given by the original assurer's *new* identity versus his old
        one.

That, in my opinion, is quick, easy, and logical.  And the innocents
aren't punished for someone else's error in judgment or mistake.



Timestamp: Tue 29 May 07, 2310 Local (UTC -0400)

====

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature