NOTA BENE - WORK IN PROGRESS - Your Inputs & Thoughts
To Brain Study - To Brain Study - Overview Projects - To Brain Study - Overview Projects Audit Next Steps
CAcert.org Audit Next Steps - Subpolicies: TTP
2010-10-11 |
|
![/!\](/moin_static199/cacert/img/alert.png "/!\"){kind=small}
with TTP-Assisted-Assurance Policy in DRAFT, this page has not been approved by AO currently. So its currently only for archival purposes and/or review - From the Audit Business Areas Assurance the
Status of Assurance Specials: TTP, Tverify, PoJAM, CodeSigning, SuperA, OA Motion on AP only
- is still left open at Sept. 15th, 2009.
- Here is the list of some work that has been started in the past and needs to be completed.
Attempt of Redesign: Remote Verification Policy (WIP) (Status: WIP 2008-07-12)
Attempt of Redesign: Remote Assurance Policy (WIP) (Status: WIP 2008-04-22)
Attempt of Redesign: TTP-assisted Assurance Policy (Status: WIP 20100901)
Call 4 Vote started: p20100913, blog post, Community Update, On Policy Group
CAcert.org TTP related pages
Inputs & Thoughts
20090915-Iang
The old TTP policy had these flaws: * it wasn't well documented * it allocated too many points; AP now puts a limit of 50 on each assurance. Business wise, there are also these things: * audit * it is not easy to walk the trail of it. * it isn't that clear how the administration is done. * where are the records, the allocations? * how to check the judgement call of the TTP person? * how to check the judgement call of the allocator? * It probably needs a handbook / wiki page to handle detail * Does it scale? Does it meet CAcert's needs? * should the points depreciate? * what is the target? * assurers? what about the challenge? * assured members? for a cert only, 50 points is good * is there a business objective? * seeding the desert? * papering the planet with assurers? * targetting well-linked people? Notes on it: http://wiki.cacert.org/wiki/PolicyDrafts/TTPAssurerCheck Attempts to redesign it: https://svn.cacert.org/CAcert/Policies/RemoteVerificationPolicy.html https://svn.cacert.org/CAcert/Policies/RemoteAssurancePolicy.html
Inputs & Thoughts
YYYYMMDD-YourName
Text / Your Statements, thoughts and e-mail snippets, Please
YYYYMMDD-YourName
Text / Your Statements, thoughts and e-mail snippets, Please