There's a difference between validating credentials and validating
identity. If we allow folks to use a web browser from any old location
we'd only be able to validate credentials ... and successfully passing a
userid/password check doesn't actually mean we're testing the person we
think we're testing.



The web testing would be for the practice exams, which are valuable for people trying to see if they are close to being able to pass.


I'm sad for my cat's sake, but I think I'd prefer a certification that
took identity confirmation seriously. Unfortunately, I think that means
that we either need to use a CISSP-like proctoring scheme or leverage an
existing organizations like the VUE/Prometric "receptionist checks your
ID" model.


Of course for the Certification to be recognized, the administration has to be done
using one of the"identity" models. These need to be runnable on a desktop computer
at a secured location, or else done on paper :-)


_______________________________________________
BSDcert mailing list
[email protected]
http://lists.nycbug.org/mailman/listinfo/bsdcert

Reply via email to