On Tue, 24 Aug 1999, A.R. (Tom) Peters wrote:
> Subject: certification database and privacy
I guess those who cared to comment did by now, so here's the score:
All stressed that we should not disclose test scores, and most that we
should only disclose if someone is certified or not (hiding any failed
attempts).
All prefer we assign our own unique ID's, although AE and DB like to
combine that with a name.
Beyond this, there is less consensus, and not all clearly stated their
opinions on the questions posed.
Q1: Is our full register public anyway, or do the LPICs need to give
their consent to inclusion? FF and GK want a flag in our database for
LPICs to opt in or out. DB thinks a register that can be accessed without
active participation of the LPIC is OK, but then the LPIC should be
notified by e-mail.
Conclusion: people can choose if their certification status is disclosed
or not.
Q2a: Can the register be accessed freely, or does the LPIC need to agree
(and give his not-guessable ID)? Opinions diverged, but if we use our
own unique generated ID's, the LPIC needs to disclose his so he is in
control anyway.
Q2b: Is the LPICs name input (with the ID), or output? Only GK and BB
gave a clear answer, and they disagreed.
My conclusion:
==============
Exam candidates get a unique personal ID for public use. They can
choose to be in a public register, which can be queried for certification
status (no info | L.I+distro | L.II | L.III+specialization) using the ID;
also the date that the certification was granted as well as the name of
LPIC is returned (so the inquirer can check the ID belongs to the person
who used it).
Note:
Decency and in some jurisdictions the law, require that people know what
information is stored about them in the database, and they may demand
corrections. So we assign LPICs a public ID for the register, but we may
also assign all exam candidates a secret ID (and maybe a password) for
access to their full record. As OH and AE pointed out, this is practice
for some other certification programs.
--
#>!$!%(@^%#%*(&(#@#*$^@^$##*#@&(%)@**$!(&!^(#((#&%!)%*@)(&$($$%(@#)&*!^$)^@*^@)
Tom "thriving on chaos" Peters
NL-1062 KD nr 149 tel. 31-204080204
Amsterdam e-mail [EMAIL PROTECTED]
________________________________________________________________________
This message was sent by the linux-cert mailing list. To unsubscribe:
echo unsubscribe | mail -s '' [EMAIL PROTECTED]
