How to Access the Tverify System

I used to be a Thawte Trusted User : Does this help me become a CAcert Assured Member?

NO! The Tverify programme was suspended as of 20091116. m20090928.1

I got points from the Tverify Programme, what happens to them?

/!\ All Tverify points as above will be deleted late 2010 /!\

You have a year to find some more CAcert Assurers.

Is there any Certificate Authorities that can be accepted for point transfer ?

Not at the moment. If the process is similar to our CAcert Web of Trust process, and we can determine the details to meet the policy requirements, then we can consider adding it.

Can I do a Cert Login to with my Certificate from another CA?



Is any CA covered by the Tverify Programme?

Not currently. See Brain/Study/AuditNextSteps/Tverify for any progress.

Beyond Today -- The Past

The rest below is historical information which is no longer reliable.

I am a "Trusted User" : Can I be recognized as a CAcert Assured Member?


Under the old Tverify it was possible for trusted users to get 50 Assurance Points. As a WoT Notary, up to 100 Assurance Points !

You provide :

How many assurance points you get ?


more comments...

your assured otherCA X509 cert plus some evidence of Date of Birth.


If you are a verified user, you can get 50 CAcert Points for connecting to the CAcert website and telling your browser to send your certificate details.

Provide evidence of Date of Birth. Iang: how?

A Notary listing entry


If you were a Notary, and you provide your Notary listing entry URL, then you will get another 40 points.

Iang: why 40? why not 50? below it says 50...

As your request is reviewed by real people, it may take some time before you get the extra points over 50. So do not worry, the reply will come as soon as possible!

For more details go Tverify.

I am a Notary : Can I be recognized as an Assurer?


No. In order to become a CAcert Assurer, you have to collect 100 Assurance points (possibly by the above process) and pass the Assurer Challenge.

Tverify only helped with Assurance Points, you have to do the Challenge by yourself!

Can I keep my already collected CAcert Assurance points with Transfered points?


No. If you plan to be assured by a CAcert assurer, you can do it after you get points via Tverify.

Example :

So you'll have 50+50 = 100 points. The opposite way is *impossible* :(

Example :

So you'll have 50+0 = only 50 points as T transfer points do not accumulate with already existing assurance points.

However, note that all Tverify points as above will be deleted late 2010 /!\ so it is best to get assured by CAcert assurers anyway. If you can reach a few of them it may be easier all round if you do that instead of using the Tverify process.



Before starting the Tverify process, the user is highly encouraged to mention his CAcert main email address on the T..... notary directory. Of course, the user can remove the email address after this process.

Should you change the details of your T Notary listing, such as to add your email address, your listing will be pulled from the Notary directory until such time as the change has been approved by T. This could take as long as a week.



You must load a valid T email cert in your browser first

This site expects that you had a T certificate loaded in your browser's certificate cache. If you receive an error -12xxx trying to load the site, it means that your browser was unable to present a T certificate.


What is a Notary URL?

You should have something like ht tps://www.thaw ctory.exe?node=00000 where 00000 is the node number where you appear in the notary map.

What passphrase should I use, do I make one up?


Use the passphrase that you would normally login to CAcert with, not T. The name on your T cert should match the name you have listed in the CAcert system.

CAcert Tverify team

What is the process for people checking requests?


There will be up to 2 pieces of information in each request:

Once you receive a request you need to verify the name and hopefully the email address of the notary exists in the URL presented, if not reject the request and state the reason as unable to locate.

If details match 100% there should generally be no reason to reject requests, but as always, if in doubt ask the mailing list or reject the request asking for further clarification, there is no harm in trusting people, but always verify!

Usually there are no more then a handful of requests per week, other times there won't be any for a few weeks, and it shouldn't take more then a minute to process each request.

Transfer Process behind-the-scenes...


Tverify Notifications come with 2 links in the email

One is the person's T listing; this should be verified to make sure they are indeed listed.

Another link will be the CAcert link to VOTE on the application. If there is any reason to doubt the assertion, or any other reason you would decline the assertion in person, then you vote it down. You may also put in comments as to WHY you voted the way you did.

As far as finding their data on the website? T now has a search by name for Notaries, you can also search by location which should be listed on their ID. But really part of the application is that THEY provide a link to their T Notary listing, like this...

ht tps://www.tha nal/wot/directory.exe?node=12345

So, we know that by signing into https ://tver that

  1. they have possession of a cert issued from T
  2. the person named in the cert has been verified by T's Web of Trust
  3. at least 1 of the emails listed is valid in that cert belongs to a user

It's up to us as voting members to verify the details that can't be programatically handled, that means checking the ID, and signing into the T site and validating their name is listed as a notary.

As a side note, if a T user with only 50 points (verified user but not a Notary) signs into tverify, the system will automatically assign them 50 points, as all the checking can be done automatically.

Brain/Study/Assurance/Tverify/oldFAQ (last edited 2014-05-31 23:03:56 by BenediktHeintel)