CAcert System Admins discussion list

["Sam Johnston" <samj AT samj.net>]

On Fri, Aug 29, 2008 at 12:25 PM, IanG <iang AT cacert.org> wrote:

> Perhaps but this doesn work for many domains and would likely be
> unreliable.

we can resolve this difficulty by using "USER CHOICE."  It
works this way:

We create a range of possibilities for the member to choose
how to establish a good claim of control or ownership.  The
user selects from this choice.  If the user can use the
first one, they do.  If the second, that also is available.
 If the third is better, they choose that...

...and our security is limited to the weakest of the options.
 

The current method has flaws.  The method I suggest has
flaws.  The method you suggest has flaws.  Provide them all
and get some confidence from a couple of them, combined!

...or require them to do 'a couple of them' (eg update WHOIS /and/ create CNAME) and you raise the bar too far unnecessarily.

Sam