A better approach to security

[<ulrich AT cacert.org>]

Hi,

I propose to start some testings first
on cacert1.it-sls.de testserver

testserver entry page with all relevant links
https://wiki.cacert.org/Software/CurrentTest

software-testers welcome pack with helpful
instruction how to create your account
on the testserver
https://wiki.cacert.org/Software/TestTeam/WelcomePack
https://wiki.cacert.org/Software/TestTeam/WelcomePack/DE

and please report your test results here :)


regards, uli   ;-)


-----Ursprüngliche Nachricht-----
Von: Benedikt Heintel 
[mailto:benedikt AT heintel.org]
 
Gesendet: Sonntag, 10. April 2011 22:36
An: 
cacert AT lists.cacert.org
Betreff: Indonesian naming scheme


Today, I faced an issue with the current naming convention, that should
be checked and somehow solved:

A friend of mine is Indonesian and she has two names with none of them
is a family name. All her siblings have two totally different names. Her
father has only one single name. If they want to open up a CAcert
account [1], they won't be able, since you need to key in a first and a
family name.
So I checked the "Practice on Names" Page [2] but could not find any
transition. On Wikipedia [3] I read some interesting information how
countries deal with this issue: Either they use a place holder (LNU [4]
(US), Onbekent (NL)) or they double the the given name and use it than
both as first and family name. In Indonesia, official documents only
contain the names given to a person.

I'd like to start the discussion, how we will handle this issue
a) during account registration and
b) during assurance.

Regarding a), I'm not sure, that every Indonesian who is affected knows
about how to sign up; I would not. We should at least offer help for
this. (Has there been ever a case?)

Regarding b):
i) Practice on Names [2] should be updated with the information, that
LNU/FNU and Onbekent are no given names.
ii) A transition from e.g. Sari to Sari LNU or Sari Onbekent or Sari
Sari is correct (according to i))  and vice versa
iii) Sari Darihati might be no first name/last name combination.

Regards,
Benedikt

[1] https://www.cacert.org/index.php?id=1
[2] http://wiki.cacert.org/PracticeOnNames
[3] http://en.wikipedia.org/wiki/Indonesian_names
[4] LNU stands for Last Name Unknown; FNU for First Name Unknown.

Attachment: smime.p7s
Description: S/MIME cryptographic signature