A better approach to security

["hheigl AT gmx.de" <hheigl AT gmx.de>]

Hy,

I have a short question therefore: why wasn't that letter presentet
BEFORE the AGM (it was dated december 2009)? I know that there was much
work to do with old issues CAcert have from the past, but if I read this
I ask myself if it was not a better plan to have started with THAT issue
within the old board? At this time there was almost 2 month after that
letter before the new board seem to be starting to deal with that issue...
So, some of the agenda of the past AGM could have been some points of
this letter and even for a short update on that issues.

Am 05.02.2010 05:18, schrieb Daniel Black:
> Members and Community,
>
> With board approval and that from the author (Bert-Jaap Koops) I now 
> present 
> the letter that was sent from Oophanga to CAcert on 20091228.
>
> The principles when Ian talked to Prof Koops was:
> 1. Oophanga is a funder needed a little more communication.
> 2. They needed some sense of progress and direction.
>   
I think Oophaga CLEARLY stated out what CAcert has to do:

--- snipp---
We therefore request you to update us on the progress CAcert is making
in the areas indicated.
In particular, we kindly request you to provide us with a sufficiently
detailed action plan that shows
how CAcert will:

1. notify the DPA of CAcert’s data processing, which we expect – given
the preparatory work
already done – to be feasible by 1 April 2010;

2. have a successful independent audit, which we expect to be feasible
by mid-2010;

3. request inclusion of its root certificate in key software, with an
indication of the prospects of
success of these requests;

4. plan to acquire financial stability and a steady income stream in the
coming years.

> As a board we will provide them with the AGM report and work towards a 
> response in the  week of the 21 Feb (next board meeting).
>   
That means that almost 3 month will go and nothing will be done?!
If something has happend and some points are worked out then I
appologize and request to forward that on the list or the wiki. Thanks.
> Your member and community input is as always welcomed.
>   
Here are my 23 Cents of improvement:
I would VERY MUCH like that some work could be done a bit faster. That
also was a very sad part in the past!
The letter sounds very serious and all the points in it are long time known.
I think point 1 and 2 could almost had begin within the old board. Also
because the old board and the new board are almost the same people and
so have (hopefully) most of that work done. I don't give up the hope
that this NOW will work out in the next few month. Otherwise...


best regards
Henrik