• Arbitrations
• a20091129.1

• Case Number: a20091129.1
• Status: closed
• Claimants: Christian Kalkhoff
• Respondents: CAcert
• Case Manager: Alexander Prinsier

• Arbitrator: UlrichSchroeter

• Date of arbitration start: 2009-12-03
• Date of ruling: 2009-12-26
• Case closed: 2009-12-26
• Complaint: Adding my second first name

when I registered myself here I used my "common name" Christian Kalkhoff in a mindless moment. On my papers my name is Klaus-Christian Kalkhoff. Is it possible for you to add the Klaus- to my already registered name?

Thanks in advance.

(Klaus-)Christian Kalkhoff

• Relief: Name correction in account

Before: Arbitrator UlrichSchroeter (A), Respondent: CAcert (R), Claimant: Christian Kalkhoff (C), Case: a20091129.1

History Log

• 2009-11-30 (UlrichSchroeter): added to wiki, request for CM / A

• 2009-12-02 (CM): Taking this case as CM
• 2009-12-02 (CM): Sent init mail
• 2009-12-03 (C): accepts CCA / DRP
• 2009-12-03 (CM): now in need for an (A).
• 2009-12-03 (A): I'll take care of this case
• 2009-12-05 (A): request to support: who assured (C) and when
• 2009-12-05 (CM): support replied

• 2009-12-08 (CM): sent out mail to those who assured (C) asking for assurance details / CAP form
• 2009-12-08 (A): Marco D confirms correct name as (C) states
• 2009-12-08 (A): Jürgen U confirms correct name as (C) states (but only by plain/unsigned mail)
• 2009-12-10 (CM): Klaus M confirms correct name as (C) states (but only by untrusted signed mail)
• 2009-12-14 (CM): Thorsten A confirms correct name as (C) states (but only by untrusted signed mail)
• 2009-12-25 (CM): request for progress report from (A)
• 2009-12-25 (A): was busy with Assurance/Software Minitop, 2 ABC interceptions, 3 Policygroup special assurance programs pushing, one addtl. interception by PoJAM infos request arbitration and the handling of the slow-arbitrators case. Now back to the change account information cases.

Discovery

• The Givenname problem
  • Name in account is without hyphen (hyphen missing).
  • Name in ID is shown with 2 names combined by a hyphen as verified by 4 assurers

  • As the hyphen combines in Germany 2 names into one name, its also shown in the PracticeOnNames - Forbidden variants:

    • Hans-Peter Fröhlich -> Hans Fröhlich -> The hypen connects the two names

    • to one single name
    • (at least according to german jurisdiction)
  • there was no malfeasance of an type alleged or found
  • the rules regarding names still exists since then claimant became a member,
    • but these are often unknown to new members.
    • these are unknown to a unknown count of assurers, who didn't visited an ATE yet.
  • so possible name errors, name switchings, name suffixes still exists in accounts
  • all 4 Assurers have verified the requested name in the account
  • from the general rule 'you can reduce information but never increase information' the correction of the double givenname that is verified by four assurers isn't effected in this case and correction of the givenname in the account name doesn't conflict with assurances made
• The certs problem

  • The CPS comes to draft at Status: DRAFT p20091108

  • If the user has created client certificates, with the not yet corrected name in the account, the certs are built up with the wrong givenname from account.

  • CPS 3.1.1. Types of names - Client Certificates. The Subscriber Naming consists of:

    • CN= The common name takes its value from one of:
      • For individual Members, a Name of the Subscriber, as Assured under AP.
  • The 2nd half of the givenname in question isn't AP conform
  • (CM) states as of Dec 3rd, that (C) has sent his CCA acceptance reply to the init mailing with a WoT client cert.

Ruling

• The first name in the Respondent's account shall be changed from "Christian" to "Klaus-Christian"
• Since there are statements by four independent CAcert members about the correct name, all Assurance Points are still valid and no forther change is needed.

• The Assurers which have assured the account have been notified that according to PracticeOnNames name variants like Christian/Klaus-Christian do not match.

• Since this is a minor and understandable mistake no further action is needed against those Assurers. Given that all of them could provide reliable evidence about the facts on short notice shows their dedication when doing Assurances.
• Client Certificates that has been created by the user after 2009-11-08 and includes the wrong givenname in the cert, must be revoked by the user.

Frankfurt/Main, Dec 26th, 2009

Execution

• 2009-12-26 (A): sent order givenname change request to Support
• 2009-12-26 (A): sent educational material to the 4 assurers
• 2009-12-26 (A): rcvd exec report from Support
• 2009-12-26 (A): informed (C) about exec and close of this case.
• 2009-12-26 (A): case closed

Similiar Cases

• CategoryArbitration

• CategoryArbCaseAccountDataNameAdditional