Policy-Discussion

[Mark Lipscombe <mark AT cacert.org>]

On 3/24/2010 11:47 AM, Andreas Bürki wrote:
> Thoughts at random:
>
> *    Why multi-member approach is not more focused on organizations?
>          *    CAcert ORGA assured organizations are CAcert members as well
>          *    Organizations will probably "live" longer than an human member
>          *    Organizations have very often something to loose, at least
> their reputation.
>          *    Organizations have very often the physical infrastructure
> to protect root keys
>
> And, yes of course, such organizations could be well known and serious
> universities, which are member of CAcert

In amongst this though is the fact that organisations are not real 
people.  They can't lock or unlock a safe, they can't remember a 
passphrase and they are subject to morphing over time with different 
motives.  For an organisation to do something, it must use real people, 
and then we have an additional layer that disconnects us from those real 
people.

In reality, people usually outlive all but the biggest organisations.

There is also still the problem of making a long stretch to define "CA 
personnel" to mean CAcert member.

A side thought: perhaps we can narrow this discussion down to a single 
list -- the number of copies of each mail is a bit much.  Being this is 
a policy discussion, the policy list would seem like a great place, so I 
have removed the other CCs.

Regards,
Mark