@ -95,7 +95,7 @@ being an operator of services to the Community.
< / p >
< h4 id = "s0.1" > 0.1 Terms < / h4 >
< ol > < li >
< ol > < li id = "s0.1.1" >
"CAcert"
means CAcert Inc.,
a non-profit Association of Members incorporated in
@ -104,25 +104,25 @@ being an operator of services to the Community.
the Members defined here.
< ul class = "q" > < li > Does CAcert mean CAcert Inc. still?< / li >
< li > CAcert seems more to mean the Community these days. Consider a change in definition?< / li > < / ul >
< / li > < li >
< / li > < li id = "s0.1.2" >
"Member"
means you, a registered participant within CAcert's Community,
with an account on the website and the
facility to request certificates.
Members may be individuals ("natural persons")
or organisations ("legal persons").
< / li > < li >
< / li > < li id = "s0.1.3" >
"Organisation"
is defined under the Organisation Assurance programme,
and generally includes corporations and other entities
that become Members and become Assured.
< / li > < li >
< / li > < li id = "s0.1.4" >
"Community"
means all of the Members
that are registered by this agreement
and other parties by other agreements,
all being under CAcert's Arbitration.
< / li > < li >
< / li > < li id = "s0.1.5" >
"Non-Related Person" ("NRP"),
being someone who is not a
Member, is not part of the Community,
@ -134,7 +134,7 @@ being an operator of services to the Community.
Such persons may make USE of certificates,
but may only RELY by entering this agreement or other related agreement.
< / span >
< / li > < li >
< / li > < li id = "s0.1.6" >
< span class = "strike" >
"Non-Related Persons - Disclaimer and Licence" ("NRP-DaL"),
another agreement that is offered to persons outside the
@ -144,15 +144,15 @@ being an operator of services to the Community.
"< a href = "//www.cacert.org/policy/RootDistributionLicence.php" > Root Distribution Licence< / a > " ("RDL"), an agreement for licensing the distribution of root < u class = "change" > certificates< / u > .
RDL replaces an earlier withdrawn licence (NRP-DaL).
< / span >
< / li > < li >
< / li > < li id = "s0.1.7" >
"Arbitration"
is the Community's forum for
resolving disputes, or jurisdiction.
< / li > < li >
< / li > < li id = "s0.1.8" >
"< a href = "//www.cacert.org/policy/DisputeResolutionPolicy.php" > Dispute Resolution Policy< / a > " ("DRP" => COD7)
is the policy and
rules for resolving disputes.
< / li > < li >
< / li > < li id = "s0.1.9" >
"USE"
means the act < b > by your software< / b >
to conduct its tasks, incorporating
@ -161,19 +161,19 @@ being an operator of services to the Community.
needed for correct operation
< / span >
according to software procedures.
< / li > < li >
< / li > < li id = "s0.1.10" >
"RELY"
means < b > your human act< / b > in taking on a
risk and liability on the basis of the claim(s)
bound within a certificate.
< / li > < li >
< / li > < li id = "s0.1.11" >
"OFFER"
means < span class = "strike" > the< / span > your act
of making available < span class = "strike" > your< / span > certificate< span class = "change" > S< / span > to another person.
Generally, you install and configure your software
to act as your agent and < span class = "change" > facilitate OFFERING< / span > < span class = "strike" > facilite this< / span > and other tasks.
OFFER does not imply suggestion of < span class = "strike" > reliance< / span > < span class = "change" > RELIANCE< / span > .
< / li > < li >
< / li > < li id = "s0.1.12" >
"Issue"
means creation of a certificate by CAcert.
To create a certificate,
@ -181,28 +181,30 @@ being an operator of services to the Community.
onto a public key and other information.
This act would generally bind a statement or claim,
such as your name, to your key.
< / li > < li >
< / li > < li id = "s0.1.13" >
"Root"
means CAcert's top level key,
used for signing certificates for Members.
In this document, the term includes any subroots.
< / li > < li >
< / li > < li id = "s0.1.14" >
"< a href = "//svn.cacert.org/CAcert/Policies/ControlledDocumentList.html" > CAcert Official Document< / a > " ("COD" < span class = "strike" > => COD3 < / span > )
< span class = "strike" > in< / span > < span class = "change" > is< / span > a standard format for describing the details of
operation and governance essential to a certificate authority.
Changes are managed and controlled.
CODs define more technical terms.
See 4.2 for listing of relevant CODs.
< / li > < li >
< / li > < li id = "s0.1.15" >
"< a href = "//www.cacert.org/policy/CertificationPracticeStatement.php" > Certification Practice Statement< / a > " ("CPS" => COD6)
is the document that controls details
about operational matters within CAcert.
< / li > < li class = "change" >
< / li > < li id = "s0.1.16" >
< span class = "change" >
"Certificate" means any public key or like device to which
the digital signature from CAcert's root has been affixed.
Where applicable, the term includes certificate chain,
being an issued certificate and any roots needed for
correct operation.
< / span >
< / li > < / ol >
@ -216,17 +218,17 @@ in this agreement.
Your agreement is given by any of
< / p >
< ul > < li >
< ul > < li id = "s1.1.b1" >
your signature on a form to request assurance of identity
("CAP" form),
< / li > < li >
< / li > < li id = "s1.1.b2" >
your request on the website
to join the Community and create an account,
< / li > < li >
< / li > < li id = "s1.1.b3" >
your request for Organisation Assurance,
< / li > < li >
< / li > < li id = "s1.1.b4" >
your request for issuing of certificates, or
< / li > < li >
< / li > < li id = "s1.1.b5" >
if you USE, RELY, or OFFER
any certificate issued to you.
< / li > < / ul >
@ -246,19 +248,19 @@ This Agreement replaces and supercedes prior agreements.
As part of the Community, CAcert offers you these rights:
< / p >
< ol > < li >
< ol > < li id = "s1.2.1" >
You may USE any certificates issued by CAcert.
< / li > < li >
< / li > < li id = "s1.2.2" >
You may RELY on any certificate issued by CAcert,
as explained and limited by CPS (COD6).
< / li > < li >
< / li > < li id = "s1.2.3" >
You may OFFER certificates issued to you by CAcert
to Members for their RELIANCE.
< / li > < li >
< / li > < li id = "s1.2.4" >
You may OFFER certificates issued to you by CAcert
to NRPs for their USE, within the general principles
of the Community.
< / li > < li >
< / li > < li id = "s1.2.5" >
This Licence is free of cost,
non-exclusive, and non-transferrable.
< / li > < / ol >
@ -287,10 +289,10 @@ ideas and contributions outside the Community.
Note that the following exceptions override this clause:
< / p >
< ol > < li >
< ol > < li id = "s1.3.1" >
Contributions to controlled documents are subject to
Policy on Policy ("PoP" => COD1).
< / li > < li >
< / li > < li id = "s1.3.2" >
Source code is subject to an open source licence regime.
< / li > < / ol >
@ -319,30 +321,30 @@ and obligations within this agreement.
< h4 id = "s2.1" > 2.1 Risks < / h4 >
< ol > < li >
< ol > < li id = "s2.1.1" >
A certificate may prove unreliable.
< / li > < li >
< / li > < li id = "s2.1.2" >
Your account, keys or other security tools may be
lost or otherwise compromised.
< / li > < li >
< / li > < li id = "s2.1.3" >
You may find yourself subject to Arbitration
(DRP => COD7).
< / li > < / ol >
< h4 id = "s2.2" > 2.2 Liabilities < / h4 >
< ol > < li >
< ol > < li id = "s2.2.1" >
You are liable for any penalties
as awarded against you by the Arbitrator.
< / li > < li >
< / li > < li id = "s2.2.2" >
Remedies are as defined in the DRP (COD7).
An Arbitrator's ruling may
include monetary amounts, awarded against you.
< / li > < li >
< / li > < li id = "s2.2.3" >
Your liability is limited to
a total maximum of
< b > 1000 Euros< / b > .
< / li > < li >
< / li > < li id = "s2.2.4" >
"Foreign Courts" may assert jurisdiction.
These include your local courts, and are outside our Arbitration.
Foreign Courts will generally refer to the Arbitration
@ -357,14 +359,14 @@ and obligations within this agreement.
You are obliged
< / p >
< ol > < li >
< ol > < li id = "s2.3.1" >
to provide accurate information
as part of Assurance.
You give permission for verification of the information
using CAcert-approved methods.
< / li > < li >
< / li > < li id = "s2.3.2" >
to make no false representations.
< / li > < li >
< / li > < li id = "s2.3.3" >
to submit all your disputes to Arbitration
(DRP => COD7).
< / li > < / ol >
@ -388,21 +390,21 @@ You are primarily responsible for your own security.
Your security obligations include
< / p >
< ol > < li >
< ol > < li id = "s2.5.1" >
to secure yourself and your computing platform (e.g., PC),
< / li > < li >
< / li > < li id = "s2.5.2" >
to keep your email account in good working order,
< / li > < li >
< / li > < li id = "s2.5.3" >
to secure your CAcert account
(e.g., credentials such as username, password),
< / li > < li >
< / li > < li id = "s2.5.4" >
to secure your private keys,
< / li > < li >
< / li > < li id = "s2.5.5" >
to review certificates for accuracy,
and
< / li > < li >
< / li > < li id = "s2.5.6" >
when in doubt, notify CAcert,
< / li > < li >
< / li > < li id = "s2.5.7" >
when in doubt, take other reasonable actions, such as
revoking certificates,
changing account credentials,
@ -563,20 +565,20 @@ You are also bound by
of which the principle ones effecting Members are:< / span >
< / p >
< ol > < li >
< ol > < li id = "s4.2.1" >
< a href = "//www.cacert.org/policy/CertificationPracticeStatement.php" >
Certification Practice Statement< / a > (CPS => COD6).
< / li > < li >
< / li > < li id = "s4.2.2" >
< a href = "//www.cacert.org/policy/DisputeResolutionPolicy.php" >
Dispute Resolution Policy< / a > (DRP => COD7).
< / li > < li >
< / li > < li id = "s4.2.3" >
< a href = "http://www.cacert.org/index.php?id=10" >
Privacy Policy< / a > (PP => COD5).
< / li > < li >
< / li > < li id = "s4.2.4" >
< span class = "change" > ADDED
< a href = "//www.cacert.org/policy/AssurancePolicy.php" >
Assurance Policy< / a > (DRP => COD7).
< / li > < li >
< / li > < li id = "s4.2.5" >
< a href = "http://svn.cacert.org/CAcert/principles.html" >
Principles of the Community< / a > .
< / li > < / ol >
Ian Grigg
14 years ago