Policy-Discussion

[Philipp Gühring <pg AT futureware.at>]

Hi,

> Well, that's easy, when you join CAcert, you can rely on CAcert certs and
> agree to be bound by arbitration. When you're not part of the community you
> cannot rely on CAcert and CAcert (members) cannot rely on you.
>
> So when you leave the community, but are allowed to use the certs after
> that moment, Cacert members will rely on that cert although the owner of
> the cert is not a member.
>
> So I would say: revoke all certs at time of leave (date X).
> This does not invalidate the cert completely, it just says that anything
> signed after date X is not valid

Most software handles revocation by invalidating all signatures before date X 
retroactively as well.

Best regards,
Philipp Gühring