NOTE: |
this info is probably out of date as the Assurance Policy (DRAFT) overrules. Consult that document before relying on the below. |
NOTE: |
all useful info should move to AssuranceHandbook2 which may deprecate this page. Consult that document in preference to the below. |
Introduction
The most important thing for CAcert is trust. Assurance Points indicate how high your trust level is and this page is all about how to get and issure these points.
If you don't want all the details you might want to read our
Receiving Assurance Points
The number of points you have indicates how likely it is that you're really the person that you claim to be. It's an indicator of how much CAcert can trust your identity. To do certain things in CAcert.org you need a certain trust level.
You receive these points by getting assured. Don't mix it with the password quality points. This has nothing to do with assurance at all!
Maximum Number of Points
Points may be accumulated up to the maximum allowed by the type of program a person is enrolled in. For a person assured via the WOT program, the maximum value allowed is 100 points. Subsequent assurances will be rounded-down to not exceed 100 points.
For a person assured via the TTP program, the maximum value allowed is 150 points. Usually when you are assured via the TTP program you are awarded all 150 points. Subsequent assurances will be rounded-down to not exceed 150 points.
TTP - Trusted Third Party
Doing the TTP Assurance Process with two TTPs may get you up to 100 points. Find out more on TTP.
WoT/CAP - Web of Trust and CAcert Assurance Program
Meeting a CAcert assurer will get you up to 35 points per assurer. You can get a maximum of 100 points this way. If someone assures you once you have reached 100 points the number of new points you receive will be reduced to 0.
In short: find an assurer via the list on CAcert (Web of Trust section) and meet with him/her.
Find out more on
AssurerGroups - Found mainly in areas where one assurer knows 3-4 others and is willing to organise a meeting for you.
Getting Points at Big Events
Sometimes there are events where you can get your full assurance (up to 150 points) on the spot. See the UpcomingEvents section of this website and read the http://blog.cacert.org (or it's RSS feed: http://blog.cacert.org/wp-rss2.php).
See also
FAQ/AssuranceByCAP - Details about getting assured
EventOrganisation - If you organise such an event
AssuredAtBigEvent - Problems with Mass Assurances at Big Events
Please be aware of that on big events are a lot of people geting assured and so the Assurances take time. It can be take several days to weeks if there was a big event like the CeBit or so. Please please be patience up to everything is processed.
Becoming an Assurer
If you are assured to 100 points, you can take the AssurerChallenge and become an Assurer yourself, as described in the Assurance Policy (DRAFT) and the AssuranceHandbook2.
Getting Points for being a Thawte Notary
Getting Points as an Organisation
* Also read Information for CAcert Assurers
More Points, More Privileges
Depending on the number of points you have you can do different things on CAcert.org.
0-49 points - Person considered "unassured" and their name is not included in any CAcert cert. You can get a ClientCert (Client Certificate used for email encryption or signing) valid for 12 months. A ServerCert (used for SSL in your webserver) for 6 months.
50 points - Your full assured name can be included in your ClientCert. ServerCerts are valid for 24 months. You can get your PGP/GPG Key signed by CAcert (PgpSigning).
100 points - You can try for the AssurerChallenge and become an Assurer. Additional special certs may now be available to you: CodesigningCert and IDN certs. You can no longer change your personal data (Name, Date of Birth, ...). curious statement...
See also http://www.cacert.org/index.php?id=19
Questions
Q. Can I lose points?
A. There are plans to establish a system that reduces the number points you have. On the one hand that's for security. It forces you to get reassured every now and then. On the other hand it strengthens the Web of Trust.
Q. Suppose 3 persons go through the trouble of being assured with 150 points. Is there anything that prevents them from certifying 3 times ( 105 points ) other 25 non-existent names, who also certify amongst themselves to reach 150 points and so on ?
A. Unfortunately No.
Q. I have an Account with more than one E-mail Adress in it. Do I have to assure all of my E-Mail Adresses and fill out as many CAPs as I have E-Mail Adresses ?
A. Currently, only the main address (default E-mail address) will be used for the Assurance.