TTPs (Trusted Third Party)

Questions that needs to be answered on this page

How the TTP-Assisted-Assurance program works?

The TTPAssurance is a program of CAcert to establish assurances in areas, where you do not find a CAcert assurer around the corner, to get as many members in these areas.

A user should try to find a CAcert assurer before he uses the TTPAssurance. It might be possible to combine a business or vacation trip with the possibility to get assured at your trip destination.

As CAcert is based on a Web of Trust (WoT) there is the need to establish this trust with a face to face meeting (F2F) normally with another CAcert member. If there is no CAcert member available one part of the F2F meeting can be conducted by a Trusted Third Party (TTP) which is approved for the users area.

Basically the process is the following.

If a user wants to get assured he is a TTPUser. First he needs to inform himself about CAcert and also about the TTPprocess.

Then he needs to fill out the first part TTPCAP form (Trusted Third Party CAcert Assurance Program) but he do not yet sign the form at this stage of the process.

With this TTPCAP form he meets with the TTP. The TTP checks his identity with at least one official government issued ID document with a photo. This check is recorded on the TTPCAP form. Then the TTPUser has to sign in presence of the TTP a few statements on the TTPCAP form to make sure he knows about the main aspects of CAcert. The TTP confirms that he witnessed the TTPUsers signing on the TTPCAP form. The TTPCAP form is now send via postal mail to CAcert.

After arrival of the TTPCAP form, a TTPAdmin takes it, checks if all requirements for the next steps are fulfilled, especially checks the TTPs validity. If the test is passed, the TTPAdmin enters the assurance in to the system and grants up to 35 points.

If a TTPUser wants to be able to get personalized certificates, he needs at least two assurances of different persons. In the case of TTPAssurance he need to go to two different TTP.

As the main aim of the TTPAssurance program is not only to get people to be able to get personalized certificates but also to get new assurers, there is a further step available: the TTPTopup.

Normally the track to become a CAcert assurer is the following:

A user needs at least 3 assurances with a F2F meeting and he has to pass the CAcert Assurer Challenge. As the assurer candidate sees in a normal assurance the steps how an assurance works, this is not given in the case of TTPAssurances. Therefore the TTPTopup steps in where a TTPAdmin acts as a tutor for the process of TTPUser on becoming an assurer.

The TTPAdmin trains the TTPUser in one or more online sessions in the assurance process (educated assurance). The TTP-admin instructs the TTP-user to start the CATS test.

If passed, the 3rd TTP-admin reviews the 2 previous TTP assurances, and collects additional evidence about the Community part of the assurance process from within the online sessions with the TTP-user and grants up to 35 TOPUP points, that qualifies the TTPUser to become an assurer.

The whole TTP process to become an CAcert assurer is given here

There have to be 2 different TTPs and there also have to be 3 different TTPAdmins in the process.

Is this program applicable to you?

Am I an accepted TTP by CACert?

Have a look if there is a TTP programm for your country in the list of approved TTP and if you match the requirements to act as TTP.

What are my duties?

The duty of the TTP is to assist the verification of a person and to witness the signing of the TTP CAP form as there is no CAcert assurer available to verify a person.

To verify a person you need to check at least one governmental issued photo identity documents according to CAcert's Assurance Policy if they match the person in front of you.

Within the TTP meeting you need to witness the signing of the following statements:

Checklist for the TTPprocess

  1. Get familiar with CAcert and read CCA

  2. During the meeting
    1. Check the personality of a person with two government issued identity documents.
    2. Witness the signing of the TTP CAP
  3. Send TTP CAP to CAcert/TTPAdmin
  4. Await response from a TTP admin

Questions and Answers

Where to find CAP forms?

CAP forms for TTP-Assisted-Assurances (WIP) There should be a sample TTP-CAP-form available for download so that you get familiar with the TTP-CAP-from.

What does the applicant has to consider before contacting a TTP?

  1. The TTP-users obligation is, to print out the customized TTP-CAP form, that he received by email from a TTP-assurer.
  2. Also to prepare a sufficiently stamped envelope with the postal adress of the TTP-assurer. The postal adress of the TTP-assurer is located on page 1 of the received printout of the customized TTP-CAP form.
  3. To check for validity of his Id documents (not expired, not tampered)
  4. Has read the CAcert Community Agreement before going to the TTP

Do I have to contact a TTP-Admin?

No. - Usually there is no need for a TTP to get in contact to the TTPAdmin. If the TTPAdmin needs information he will get in contact with the TTPUser or the TTP.

Where to send the TTP CAP form?

The TTP-user will receive a pre-filled TTP-CAP form. This customized TTP-CAP form the TTP-user will bring to the Face-2-Face meeting with the TTP. Once the TTP-CAP form is filled by the TTP with his addtl. informations (Name of TTP, register, a.o.), the TTP puts the TTP-CAP forms into a prepared envelope, that he get from the TTP-user and sends this envelope with the postal address of a TTP-assurer to that address. The postal adress of the TTP-assurer is also located on page 1 of the multiple pages TTP-CAP form.

What, if the applicant is below the age of 18 years?

Currently TTP-assisted-assurance program is under deployment. Assurance of Junior members follows another special assurance program. So therefore the deployment of U18 program under TTP-assisted-assurance is delayed and therefore currently not applicable.

What to do if there is no TTP available in a country?

Probably there is no deployment for the TTP program yet for this country. To start a deployment for your country, you can write an email to support. They will forward your request to the appropriate mailing lists.

How you could assist in deployment ?


TTPs Approved List

TTP/TrustedThirdParty (last edited 2015-06-14 06:08:42 by AlesKastner)