A better approach to security

[<ulrich AT cacert.org>]

Dear Community,

As the first answers my call for Senior-Assurers to become TTP-admin
also Ians first modification of the main entry for the new
TTP program in the wiki, we should move the discussion from
Policy Group to another channel.

I've rethought a while, what suits best.
Education is involved but the main work
is documentation work for 3 involved
parties:
 * TTP members (Assuree that requests a TTP Assisted Assurance)
 * TTP's who needs to be informed
   with an info package, so that they'll
   know what they'll have to check
   info: where to send the TTP Cap forms
 * TTPadmin's ... info ...
   which countries are allowed, what are the known
   accepted TTPs for this country, how to verify a TTP request
   transfer of the TTP cap form to the TTPadmin procedure

The info, which TTPs are accepted for one country is not only
interesting to the TTPadmin, its also interesting to the
TTP members, so they'll know where to go for a TTP Assisted
Assurance.

Using below wiki page as the starting point is a good idea.
but bundling the discussion I'll propose to move to
cacert AT lists.cacert.org, as this project is an international
one. Its beside policy work, but to free the Policy Group
channel for further Policy deployments, discussions
and votes, I suggest cacert AT l.c.o
   
One addtl. suggestion about translations of the info
pages ...
As somebody started translations of some wiki pages
into french, and started replacing of the english
pages, the format for translated pages has been
introduced to add a subpage to the translating
page ...

i.e.  TTP      main entry  (English)
      TTP/DE   main entry  (German translation)
      TTP/E    main entry  (Spanish translation)
      TTP/F    main entry  (French translation)

and link all these translated pages on top
of the main English page with links to
the translated pages. On the translated pages
add links to other translated pages
e.g. [[FAQ/AssuranceInformationForTTP/E]]


Please reply to the email only for channel
cacert AT l.c.o so the discussion gets
bundled in one mailing list only.

Thanks in advance


regards, uli   ;-)



-----Ursprüngliche Nachricht-----
Von: CAcert Wiki [mailto:returns AT cacert.org] 
Gesendet: Montag, 27. September 2010 15:59
An: CAcert Wiki
Betreff: [CAcert Wiki] Änderung von "TTP" von SunTzuMelange


Sehr geehrter Wikibenutzer,

Sie haben die Änderungen einer Wikiseite oder Kategorie von "CAcert Wiki"
abonniert.

Die Seite "TTP" wurde durch SunTzuMelange verändert:

https://wiki.cacert.org/TTP?action=diff&rev1=16&rev2=17

+ This is the top-level page for the TTP-Assisted Assurance
(sub)programme.
- ||<#FF8080>Note that the TTP programme is effectively '''Frozen'''||
- ||<#FF8080>Until a subsidiary policy under AP is written, it is against
AP rules.||
  
+    ||<#00FF00> :-) The TTP-Assisted Assurance Policy is now approved to
DRAFT :-) ||
+    ||<#00FF00> This '''new''' policy now has to be implemented. ||
+ 
+ == Steps & tasks ==
+ 
+ Assurance Team!  Start your engines . . .
+ 
+ || ''task'' || ''leader'' || ''status'' || ''comments'' ||
+ || Document the process in handbook. || || || ||
+ || Appoint, list, document, whatever the Senior Assurers / TTP-Admins
|| || || ||
+ || Search wiki for all TTP references and change || || || ||
+ || reformat policy to drop the coloured parts. || [[Iang]] || || ||
+ || push the clean DRAFT policy onto the main website. || [[Iang]] || ||
||
+ || packages as mentioned in policy. || || || ||
+ || fix up the website text (prefer to destroy it and jiust point to
wiki). || || || ||
+ || Check Assurer Challenge to see if there is mention of it, fix the
Questions. || || || ||
+ || write some mini-C questions for fiddle. || [[Iang]] || || ||
+ || write a procedure for Support to add the TTPadmin flag to Senior
Assurers. || || || ||
+ || trial run? || || || ||
+ || organise this top-level page to point to all references  || || || ||
+ 
+ == Old TTP programme ==
+ 
+ Note that the TTP programme is effectively was frozen because it was
knocked out by [[https://www.cacert.org/policy/AssurancePolicy.php|AP]]
rules.
+ 
+ == references ==
  
  For more information about Trusted Third Parties see
  
-  * [[AssuranceHandbook2]] - Your primary source for all general
information about getting Assured (meaning of programmes and terms: CAP,
WOT, TTP, ...)]
+  * [[AssuranceHandbook2]] - Your primary source for all general
information about getting Assured (meaning of programmes and terms: CAP,
WOT, TTP, ...)
   * [[FAQ/AssuranceByTTP]] - Getting Assured by a Trusted Third Party
(TTP) (information for the Member)
   * [[FAQ/AssuranceInformationForTTP]] - How to conduct an Assurance as a
Trusted Third Parties (TTP) (information for the accountant, notary, etc)
   * [[FAQ/TTPAvailability|Availability by countries]] - those countries
that do not have TTP available in them any more

Attachment: smime.p7s
Description: S/MIME cryptographic signature