česky | english
TTP-TOPUP Assurer (TTP-Admins II)
All you need to know as TTP-TOPUP Assurer (TTP-Admins II)
Questions that needs to be answered on this page
Open questions
State of TTP-TOPUP Assurer role
{-}
What is the TTP-TOPUP Assurer role?
{0}
How to volunteer as TTP-TOPUP Assurer?
{0}
Which infos I need for practicle work as TTP-TOPUP Assurer?
{0}
Available list of TTP-Assurer and TTP-TOPUP Assurer to be announced for TTP-users ? TTP-Notaries ??
{0}
Is there a register needed for TTP's ?
{0}
Does the TTP-TOPUP Assurer needs to see the the CAP forms from TTP's ?
{-}
{0}
Where to redirect TTP-Users, TTP-Notaries questions ?
{+}
Will there be a TTP Assurer mailing list?
{+}
What information material is needed?
{0}
Does the TTP-TOPUP Assurer needs the TTP CAP forms?
{0}
more questions ?
State of TTP-TOPUP Assurer role
As long as there is no system implementation deployed, so long no TTP Assurer can be activated in the system, so long no TTP Assurer can enter TTP-assisted assurances into the system, so long the TTP program is frozen
Current state as per 2013-01-20:
2 TTP-assisted-assurances can be entered online
TOPUP program cannot be entered into the online form, so currently doesn't work- system implementation to enter TTP assurances into the system
- The deployment of this bug# has to be developed, tested and deployed first, before any TTP-Assurer can enter TTP-assisted-assurances into the system
- Software-Assessment team is working currently on the Thawte-patch. For details read
- CCA Rollout patch is an Audit blocking factor. That needs to be deployed too. So the question here will be if the TTP patch will be deployed before or after the CCA Rollout patch
- Current plans from Software-Assessment team to handle projects are:
- Thawte Patch
- several Policy and Arbitration related patches (this may include the TTP patches)
- CCA Rollout patch
- but the order may be turned around if the Thawte patch needs much more time to be deployed
- Software-Assessment team is working currently on the Thawte-patch. For details read
TTP-TOPUP Assurer (volunteers)
- If you are interested in becoming a TTP-TOPUP Assurers just add your name on this list. The responsible officer (AO) will get in contact with you and guide you into the process.
Name
TTP-TOPUP Assurer (active)
Name
nominated
resigned
Ulrich Schröter
29th April 2016
Marcus Mängel
2015
TTP-TOPUP Assurer Tasks I
What are the tasks of a TTP-TOPUP Assurer?
The tasks of a TTP-TOPUP Assurer are:
- Gets informed by the second TTP-Assurer that the TTP user requests to take part in the TTP-TOPUP-Programm
- Performs an interview with the with TTP user (mail, irc, phone). The interwiew is somewhere between ATE and educated assurances
- Checks the two TTP assurances including crosscheck of the liability of the TTPs
- Entering the TTP TOPUP into the WebDB.
- Informs AO about successful TOPUP
How to verify the liability of a TTP?
Have a look in the list of approved TTP for the desired country if the TTP is approved.
Go to the country list to verify the TTP eg with the registration number. In some cases there are registers to crosscheck the registration number otherwise there should be an advice there how to check the TTP.
WIP
Requirements
- To be TTP Assurer, this includes to be Senior-Assurer
- 100 Assurance Points, 50 Expierence Points
- Attended ATE
- did a co-audited assurance
- Interview with responsible officer (AO)
- Responsible officer (AO) will appoint TTP-TOPUP Assurers, sends notification to board, request support to set TTP adminflag category TTP-TOPUP Assurers
- TTPadmin flag set in Useraccount
- Before TTPadmin flags can be set, a cleanup needs to be done on production system. Finished
TTPs Approved List
- A list of TTP's that are accepted by CAcert needs to be deployed.
The old Assurers TTP Matrix is only a suggestion, from the old days program that needs to be get approved. Needs the TTP to be registered in a register that can be checked by a TTP-Admin ?
Will there be a mailing list for TTP?
- There is a closed mailing list for TTP Assurer (TTP admins and TTP TOPUP admins) to communicate internaly and to find the TTP requests.
- TTP assuer use OTRS
Where to redirect TTP-Users, TTP-Notaries questions ?
- Main contact is support
- Once the TTP Assurer sends the TTP-CAP form to the TTP User he is also contact for questions.
What material will be avialable for with TTP-TOPUP Assurers?
proposal
- checklist
- presentation to send to TTP User as base for the interview
Does the TTP-TOPUP Assurer needs the TTP CAP forms?
- As the information about the TTP is entered in the WebDB there should be no need for the TTP TOPUP Assuerer to see the original TTP CAP form
- If needed a digitial copy needs to be send in a secure way to the TTP TOPUP Assuerer. The needs to delete this digital copy as soon as he finishes the TTP TOPUP procedure. He is not allowed to store this copy after he finishes the TTP TOPUP process. (is questionable u60)
- TTP TOPUP assurer needs to document the TOPUP process, also he enters the the TOPUP as an "assurance method TOPUP" into the system. So therefor he needs to has this documented in paperform if later this process gets arbitrated and an Arbitrator requests the documentation from the TOPUP assurer. So this is similiar to a regular F2F assurance, where the assurer documents the activities @home, what happens with the homework, eg no account found, contacted assuree, received response - account created, entered assurance when and so on. The TOPUP assurer has to document the interview process, when did it happen, which way, what has been transfered on informations to the TTPuser, has the TTPuser confirmed the TOPUP request, and probably much more
Proposal of the TTP TOPUP process
- The TTP user reads the Assurance Handbook [1] and the Assurance Policy [2].
- The TTP user discusses questions with TTP-TOPUP Assurer
- The TTP user reads the CAcert Community Agreement (CCA) [3]
- The TTP user discusses questions with TTP-TOPUP Assurer
- The TTP user takes the CATS test [4]
- The TTP-TOPUP Assurer creates an account for the TTP user on the test server [5] with assurer ability.
- The TTP-TOPUP Assurer creates a CAP form for his account on the test server
- The TTP-TOPUP Assurer guides the TTP user through a test assurance which will be entered on the test server. Here things are discussed that are needed for run an assurance.
- If the TTP-TOPUP Assurer is convinced that the TTP user has enough knowledge about the CAcert he will grant the last 30 points
- The TTP-TOPUP Assurer documents his finding and the granting of the points and keeps the record similar to the normal CAP form.
[3] https://www.cacert.org/policy/CAcertCommunityAgreement.php