A better approach to security

["LarryD" <larry.haywood AT seventhfire.com>]

I have a question to pose to the list

A Cacert member has contacted me with request for assurance with the end
goal of becoming an assurer himself.
During the process of providing assurance I became aware that IMHO, the id
number used to join CaCert does not appear to meet the Requirement of "a
unique ID number issued to them by their Government"

The ID does not indicate any-where it is issued by a state or federal
authority, it has a picture of the individual, and the name of a company
that may contract for the US government.

The individual has presented a state drivers license as a 2nd id for the
purpose of identification. I'm having a problem with the fact that what
Cacert has defined as "National ID" doesn't fit the ticket.

I may be nitpicking here but seems to me there's a pretty good reason for
having the rules. And I guess I would have hoped any one requesting to
become an assurer would be required to hit the mark completely.

"Larry reaches for the firesuit as he presses the send button"

Have a fine day!

Larry Haywood


-----Original Message-----
From: LarryD [mailto:larry.haywood AT seventhfire.com]
Sent: Thursday, August 19, 2004 12:33 AM
To: 'geoffrey'
Cc: 'support AT cacert.org'
Subject: RE: assurance request


Geoffrey;
Not sure why I didn't get the first email, sorry about the mix-up.

Sergio mentioned you would be emailing me with the request.

I've copied support on a question I need some clarification on before I
can process your assurance request.

When I started the Assurer form process using your supplied email address,
I noticed the number listed as your national ID came from your company ID
badge. Since ticom.com is not a state or federal agency, I don't believe
the company id card qualifies as:

"a unique ID number issued to them by their Government" (See link)

https://www.cacert.org/index.php?id=10#rreg


I have no doubt you are willing to provide a state or federal form of
identification along with the company ID for assurance which I'm fine
with. I just want to make sure the currently listed ID number is not an
issue.

I'm sure you would agree that what CAcert is pulling together is important
enough to take some time to make sure we get it right.

I'm sure someone from support will contact us fairly shortly with some
information. Thanks in advance for hanging in there. Once we get some
clarification I'm sure both my wife and I can help you with the assurance
you're looking for.



Larry Haywood


-----Original Message-----
From: geoffrey [mailto:geoffrey AT ticom.com]
Sent: Wednesday, August 18, 2004 10:21 PM
To: cacert AT seventhfire.com; larry.haywood AT seventhfire.com
Subject: assurance request

Hi,
    I recently enrolled in the CACert ECCP program and was wanting to meet
up to get some Assurance Points. I emailed you a few days ago, but hadn't
heard back; so I thought I would try again in case the first email got
lost. I got your email address from the CACert website and Sergio Reyes.
Sergio indicated your wife is also a CACert Assurer. If this is correct, I
would appreciate the opportunity to get assurance points from her as well.
Let me know when you might be able to meet. Thanks for your time.

geoffrey

Attachment: smime.p7s
Description: S/MIME cryptographic signature