Please note that this document is DEPRECATED.

Please go to the AssuranceHandbook2 for the real stuff.





CAcert assurer handbook

2005-06-30


There document has been extensively rewritten on AssuranceHandbook2. All are referred to there. This document below is deprecated by the Policy status of Assurance Policy which refers the handbook to AssuranceHandbook2


Table of Contents

Requirements

Information needed for an CAcert office entry

Question: I have not seen anything like a 'CAcert office' till now, and I doubt if it is a sensible concept for the average assurer. I'd just distinguish between 'individual assurances', where a meeting is agreed directly between assurer and assuree(s) and 'events' or 'signing parties', which are published using CAcert's infrastructure.

For the first kind of meeting the assurer should know in advance whom s/he is going to assure on the basis of which documents. During an event s/he may meet some surprises considering the presented documents

BernhardFröhlich

The assurance procedure

Preparation

Individual assurance

Events

Assurance

Verification

See also AcceptableDocuments.

IMPORTANT : IT SHOULD TAKE YOU AT LEAST A MINUTE TO CHECK THE IDs! SOMEONE TRYING TO HURRY YOU IS A SIGN THAT THERE IS SOMETHING FISHY ABOUT THE DOCUMENTS

Points scheme

Table of issueable points

Your Assurance Points

Issuable Points

100

10

110

15

120

20

130

25

140

30

150

35

For every assurance one gets 2 points up to the maximum of 150 points.

This guarantees a general 4 eye check. To have your own certificates you have to be verified by at least 2 assurer. To become an assurer you must at least checked by 3 assurers and have to exercise a bit until you are fully assured.

Fees

Possible problems

If someone has faked or contradictory IDs, get as many information as possible about this person.

Give Points

Work after the meeting

Sending CAP forms to CAcert

You may be requested to send CAP forms to CAcert, maybe because there was a complaint about a certificate or just as part of a quality assurance process. CAP forms contain personal data, so the requester has to be authorized to see them and you have to make sure that noone else can read that data.

Issue certificates

To get a certificate for your email address please do:

Mailclient setup

FAQ - frequently asked questions

Who is CAcert?

What is a CA?

What is the goal of CAcert?

What is CAcert doing?

What is the difference to other CAs?

May children be assured?

How is privacy protected?

Is CAcert included in browsers by default?

Does CAcert have qualified certificates?

What can i do with my certificates?

What is the fingerprint from CAcert?

What is an assurance?

Which technologies are supported?

Are there special requirements for certificates?

There are special requirements for certificates for:

For those certificates you need to be an Assurer according to CPS 1.4.5.

Note, in the older pre-CPS days, you needed at least 100 points and you have to send a copy of your Photo ID to CAcert. However Photo Id was dropped around 2008.

Is the sourcecode available?

Why are always 2 assures needed?

Does CAcert use OCSP?

How many people use CAcert?

What does web of trust (wot) mean?

Support

 CAcert Headquarter
 P.O. Box 4107
 Denistone East NSW 2112
 AU- Australia

 CAcert support Austria:
 http://www.cacert.at/
 office@cacert.at

On the Internet:

Wiki: http://wiki.cacert.org/

Chat: irc://irc.cacert.org

or Freenodeserver

If you do not know how to use an IRC client you may also try the Webchaton