Policy-Discussion

[Daniel Black <daniel AT cacert.org>]

I think that bugged me while doing root key escrow procedures 9.2.3.

9.2.3.  Recovery
Recovery must only be conducted under Arbitrator authority. 

I don't know why this is here. There will be procedures for subroot 
generation 
so I'm not sure what arbitrator control is required. Really only board 
control 
is required to recover as it follows on from 9.2.4

replace to "Recovery must only be conducted under board control"

9.2.4 Revocation is oddly enough blank.

My suggestion here is as we the rest of root processes are under board 
control 
this should be also.

"Revocation of root and subroots must only be performed under board control"

Arbitration isn't required. It will be a decision of the board based on 
evidence and it isn't an abnormal procedures - only hopefully a very 
infrequent only.


-- 
Daniel Black
CAcert

Attachment: smime.p7s
Description: S/MIME cryptographic signature