Re: awareness + flexibility + security

[Jonathan S. Shapiro]

On Mon, 2005-11-14 at 18:17 +0900, Andre Caldas wrote:

> > This is not about things for customers, it's about things for service
> > providers.  I know in some cases the line between them is blurry.
> 
> My concern is about this situation:
> "If you don't want to prove that you are innocent, then this must mean 
> you are guilty!"
> 
> Do I have to prove I am innocent?

Absolutely. It is a requirement of the service provider contract that
they undertake a given set of defensive measures. The alternative to
attestation for this is third-party audit.


shap