Trusted Third Parties (2)
Issues in using TTPs
- can the TTP bear liability i.e. risk management
- is the TTP really trusted - and what assurance is there
- does the TTP support the right business model
- does the TTP support the right standards
- legal/contractual issues
- do you use it for open loop and/or close loop certificates
- are vanilla TTP CPS and policies close to your business model
Issues in being a TTP
- do you have the capital and risk management schemes to manage the incurred liability
- what other services to offer