@ -95,7 +95,7 @@ being an operator of services to the Community.
< / p > < / p >
< h4 id = "s0.1" > 0.1 Terms < / h4 > < h4 id = "s0.1" > 0.1 Terms < / h4 >
< ol > < li > < ol > < li id = "s0.1.1" >
"CAcert"
"CAcert"
means CAcert Inc.,
means CAcert Inc.,
a non-profit Association of Members incorporated in
a non-profit Association of Members incorporated in
@ -104,25 +104,25 @@ being an operator of services to the Community.
the Members defined here.
the Members defined here.
< ul class = "q" > < li > Does CAcert mean CAcert Inc. still?< / li > < ul class = "q" > < li > Does CAcert mean CAcert Inc. still?< / li >
< li > CAcert seems more to mean the Community these days. Consider a change in definition?< / li > < / ul > < li > CAcert seems more to mean the Community these days. Consider a change in definition?< / li > < / ul >
< / li > < li >
< / li > < li id = "s0.1.2" >
"Member"
"Member"
means you, a registered participant within CAcert's Community,
means you, a registered participant within CAcert's Community,
with an account on the website and the
with an account on the website and the
facility to request certificates.
facility to request certificates.
Members may be individuals ("natural persons")
Members may be individuals ("natural persons")
or organisations ("legal persons").
or organisations ("legal persons").
< / li > < li >
< / li > < li id = "s0.1.3" >
"Organisation"
"Organisation"
is defined under the Organisation Assurance programme,
is defined under the Organisation Assurance programme,
and generally includes corporations and other entities
and generally includes corporations and other entities
that become Members and become Assured.
that become Members and become Assured.
< / li > < li >
< / li > < li id = "s0.1.4" >
"Community"
"Community"
means all of the Members
means all of the Members
that are registered by this agreement
that are registered by this agreement
and other parties by other agreements,
and other parties by other agreements,
all being under CAcert's Arbitration.
all being under CAcert's Arbitration.
< / li > < li >
< / li > < li id = "s0.1.5" >
"Non-Related Person" ("NRP"),
"Non-Related Person" ("NRP"),
being someone who is not a
being someone who is not a
Member, is not part of the Community,
Member, is not part of the Community,
@ -134,7 +134,7 @@ being an operator of services to the Community.
Such persons may make USE of certificates,
Such persons may make USE of certificates,
but may only RELY by entering this agreement or other related agreement.
but may only RELY by entering this agreement or other related agreement.
< / span > < / span >
< / li > < li >
< / li > < li id = "s0.1.6" >
< span class = "strike" > < span class = "strike" >
"Non-Related Persons - Disclaimer and Licence" ("NRP-DaL"),
"Non-Related Persons - Disclaimer and Licence" ("NRP-DaL"),
another agreement that is offered to persons outside the
another agreement that is offered to persons outside the
@ -144,15 +144,15 @@ being an operator of services to the Community.
"< a href = "//www.cacert.org/policy/RootDistributionLicence.php" > Root Distribution Licence< / a > " ("RDL"), an agreement for licensing the distribution of root < u class = "change" > certificates< / u > .
"< a href = "//www.cacert.org/policy/RootDistributionLicence.php" > Root Distribution Licence< / a > " ("RDL"), an agreement for licensing the distribution of root < u class = "change" > certificates< / u > .
RDL replaces an earlier withdrawn licence (NRP-DaL).
RDL replaces an earlier withdrawn licence (NRP-DaL).
< / span > < / span >
< / li > < li >
< / li > < li id = "s0.1.7" >
"Arbitration"
"Arbitration"
is the Community's forum for
is the Community's forum for
resolving disputes, or jurisdiction.
resolving disputes, or jurisdiction.
< / li > < li >
< / li > < li id = "s0.1.8" >
"< a href = "//www.cacert.org/policy/DisputeResolutionPolicy.php" > Dispute Resolution Policy< / a > " ("DRP" => COD7)
"< a href = "//www.cacert.org/policy/DisputeResolutionPolicy.php" > Dispute Resolution Policy< / a > " ("DRP" => COD7)
is the policy and
is the policy and
rules for resolving disputes.
rules for resolving disputes.
< / li > < li >
< / li > < li id = "s0.1.9" >
"USE"
"USE"
means the act < b > by your software< / b >
means the act < b > by your software< / b >
to conduct its tasks, incorporating
to conduct its tasks, incorporating
@ -161,19 +161,19 @@ being an operator of services to the Community.
needed for correct operation
needed for correct operation
< / span > < / span >
according to software procedures.
according to software procedures.
< / li > < li >
< / li > < li id = "s0.1.10" >
"RELY"
"RELY"
means < b > your human act< / b > in taking on a
means < b > your human act< / b > in taking on a
risk and liability on the basis of the claim(s)
risk and liability on the basis of the claim(s)
bound within a certificate.
bound within a certificate.
< / li > < li >
< / li > < li id = "s0.1.11" >
"OFFER"
"OFFER"
means < span class = "strike" > the< / span > your act
means < span class = "strike" > the< / span > your act
of making available < span class = "strike" > your< / span > certificate< span class = "change" > S< / span > to another person.
of making available < span class = "strike" > your< / span > certificate< span class = "change" > S< / span > to another person.
Generally, you install and configure your software
Generally, you install and configure your software
to act as your agent and < span class = "change" > facilitate OFFERING< / span > < span class = "strike" > facilite this< / span > and other tasks.
to act as your agent and < span class = "change" > facilitate OFFERING< / span > < span class = "strike" > facilite this< / span > and other tasks.
OFFER does not imply suggestion of < span class = "strike" > reliance< / span > < span class = "change" > RELIANCE< / span > .
OFFER does not imply suggestion of < span class = "strike" > reliance< / span > < span class = "change" > RELIANCE< / span > .
< / li > < li >
< / li > < li id = "s0.1.12" >
"Issue"
"Issue"
means creation of a certificate by CAcert.
means creation of a certificate by CAcert.
To create a certificate,
To create a certificate,
@ -181,28 +181,30 @@ being an operator of services to the Community.
onto a public key and other information.
onto a public key and other information.
This act would generally bind a statement or claim,
This act would generally bind a statement or claim,
such as your name, to your key.
such as your name, to your key.
< / li > < li >
< / li > < li id = "s0.1.13" >
"Root"
"Root"
means CAcert's top level key,
means CAcert's top level key,
used for signing certificates for Members.
used for signing certificates for Members.
In this document, the term includes any subroots.
In this document, the term includes any subroots.
< / li > < li >
< / li > < li id = "s0.1.14" >
"< a href = "//svn.cacert.org/CAcert/Policies/ControlledDocumentList.html" > CAcert Official Document< / a > " ("COD" < span class = "strike" > => COD3 < / span > )
"< a href = "//svn.cacert.org/CAcert/Policies/ControlledDocumentList.html" > CAcert Official Document< / a > " ("COD" < span class = "strike" > => COD3 < / span > )
< span class = "strike" > in< / span > < span class = "change" > is< / span > a standard format for describing the details of
< span class = "strike" > in< / span > < span class = "change" > is< / span > a standard format for describing the details of
operation and governance essential to a certificate authority.
operation and governance essential to a certificate authority.
Changes are managed and controlled.
Changes are managed and controlled.
CODs define more technical terms.
CODs define more technical terms.
See 4.2 for listing of relevant CODs.
See 4.2 for listing of relevant CODs.
< / li > < li >
< / li > < li id = "s0.1.15" >
"< a href = "//www.cacert.org/policy/CertificationPracticeStatement.php" > Certification Practice Statement< / a > " ("CPS" => COD6)
"< a href = "//www.cacert.org/policy/CertificationPracticeStatement.php" > Certification Practice Statement< / a > " ("CPS" => COD6)
is the document that controls details
is the document that controls details
about operational matters within CAcert.
about operational matters within CAcert.
< / li > < li class = "change" >
< / li > < li id = "s0.1.16" >
< span class = "change" >
"Certificate" means any public key or like device to which
"Certificate" means any public key or like device to which
the digital signature from CAcert's root has been affixed.
the digital signature from CAcert's root has been affixed.
Where applicable, the term includes certificate chain,
Where applicable, the term includes certificate chain,
being an issued certificate and any roots needed for
being an issued certificate and any roots needed for
correct operation.
correct operation.
< / span >
< / li > < / ol > < / li > < / ol >
@ -216,17 +218,17 @@ in this agreement.
Your agreement is given by any of
Your agreement is given by any of
< / p > < / p >
< ul > < li > < ul > < li id = "s1.1.b1" >
your signature on a form to request assurance of identity
your signature on a form to request assurance of identity
("CAP" form),
("CAP" form),
< / li > < li >
< / li > < li id = "s1.1.b2" >
your request on the website
your request on the website
to join the Community and create an account,
to join the Community and create an account,
< / li > < li >
< / li > < li id = "s1.1.b3" >
your request for Organisation Assurance,
your request for Organisation Assurance,
< / li > < li >
< / li > < li id = "s1.1.b4" >
your request for issuing of certificates, or
your request for issuing of certificates, or
< / li > < li >
< / li > < li id = "s1.1.b5" >
if you USE, RELY, or OFFER
if you USE, RELY, or OFFER
any certificate issued to you.
any certificate issued to you.
< / li > < / ul > < / li > < / ul >
@ -246,19 +248,19 @@ This Agreement replaces and supercedes prior agreements.
As part of the Community, CAcert offers you these rights:
As part of the Community, CAcert offers you these rights:
< / p > < / p >
< ol > < li > < ol > < li id = "s1.2.1" >
You may USE any certificates issued by CAcert.
You may USE any certificates issued by CAcert.
< / li > < li >
< / li > < li id = "s1.2.2" >
You may RELY on any certificate issued by CAcert,
You may RELY on any certificate issued by CAcert,
as explained and limited by CPS (COD6).
as explained and limited by CPS (COD6).
< / li > < li >
< / li > < li id = "s1.2.3" >
You may OFFER certificates issued to you by CAcert
You may OFFER certificates issued to you by CAcert
to Members for their RELIANCE.
to Members for their RELIANCE.
< / li > < li >
< / li > < li id = "s1.2.4" >
You may OFFER certificates issued to you by CAcert
You may OFFER certificates issued to you by CAcert
to NRPs for their USE, within the general principles
to NRPs for their USE, within the general principles
of the Community.
of the Community.
< / li > < li >
< / li > < li id = "s1.2.5" >
This Licence is free of cost,
This Licence is free of cost,
non-exclusive, and non-transferrable.
non-exclusive, and non-transferrable.
< / li > < / ol > < / li > < / ol >
@ -287,10 +289,10 @@ ideas and contributions outside the Community.
Note that the following exceptions override this clause:
Note that the following exceptions override this clause:
< / p > < / p >
< ol > < li > < ol > < li id = "s1.3.1" >
Contributions to controlled documents are subject to
Contributions to controlled documents are subject to
Policy on Policy ("PoP" => COD1).
Policy on Policy ("PoP" => COD1).
< / li > < li >
< / li > < li id = "s1.3.2" >
Source code is subject to an open source licence regime.
Source code is subject to an open source licence regime.
< / li > < / ol > < / li > < / ol >
@ -319,30 +321,30 @@ and obligations within this agreement.
< h4 id = "s2.1" > 2.1 Risks < / h4 > < h4 id = "s2.1" > 2.1 Risks < / h4 >
< ol > < li > < ol > < li id = "s2.1.1" >
A certificate may prove unreliable.
A certificate may prove unreliable.
< / li > < li >
< / li > < li id = "s2.1.2" >
Your account, keys or other security tools may be
Your account, keys or other security tools may be
lost or otherwise compromised.
lost or otherwise compromised.
< / li > < li >
< / li > < li id = "s2.1.3" >
You may find yourself subject to Arbitration
You may find yourself subject to Arbitration
(DRP => COD7).
(DRP => COD7).
< / li > < / ol > < / li > < / ol >
< h4 id = "s2.2" > 2.2 Liabilities < / h4 > < h4 id = "s2.2" > 2.2 Liabilities < / h4 >
< ol > < li > < ol > < li id = "s2.2.1" >
You are liable for any penalties
You are liable for any penalties
as awarded against you by the Arbitrator.
as awarded against you by the Arbitrator.
< / li > < li >
< / li > < li id = "s2.2.2" >
Remedies are as defined in the DRP (COD7).
Remedies are as defined in the DRP (COD7).
An Arbitrator's ruling may
An Arbitrator's ruling may
include monetary amounts, awarded against you.
include monetary amounts, awarded against you.
< / li > < li >
< / li > < li id = "s2.2.3" >
Your liability is limited to
Your liability is limited to
a total maximum of
a total maximum of
< b > 1000 Euros< / b > .
< b > 1000 Euros< / b > .
< / li > < li >
< / li > < li id = "s2.2.4" >
"Foreign Courts" may assert jurisdiction.
"Foreign Courts" may assert jurisdiction.
These include your local courts, and are outside our Arbitration.
These include your local courts, and are outside our Arbitration.
Foreign Courts will generally refer to the Arbitration
Foreign Courts will generally refer to the Arbitration
@ -357,14 +359,14 @@ and obligations within this agreement.
You are obliged
You are obliged
< / p > < / p >
< ol > < li > < ol > < li id = "s2.3.1" >
to provide accurate information
to provide accurate information
as part of Assurance.
as part of Assurance.
You give permission for verification of the information
You give permission for verification of the information
using CAcert-approved methods.
using CAcert-approved methods.
< / li > < li >
< / li > < li id = "s2.3.2" >
to make no false representations.
to make no false representations.
< / li > < li >
< / li > < li id = "s2.3.3" >
to submit all your disputes to Arbitration
to submit all your disputes to Arbitration
(DRP => COD7).
(DRP => COD7).
< / li > < / ol > < / li > < / ol >
@ -388,21 +390,21 @@ You are primarily responsible for your own security.
Your security obligations include
Your security obligations include
< / p > < / p >
< ol > < li > < ol > < li id = "s2.5.1" >
to secure yourself and your computing platform (e.g., PC),
to secure yourself and your computing platform (e.g., PC),
< / li > < li >
< / li > < li id = "s2.5.2" >
to keep your email account in good working order,
to keep your email account in good working order,
< / li > < li >
< / li > < li id = "s2.5.3" >
to secure your CAcert account
to secure your CAcert account
(e.g., credentials such as username, password),
(e.g., credentials such as username, password),
< / li > < li >
< / li > < li id = "s2.5.4" >
to secure your private keys,
to secure your private keys,
< / li > < li >
< / li > < li id = "s2.5.5" >
to review certificates for accuracy,
to review certificates for accuracy,
and
and
< / li > < li >
< / li > < li id = "s2.5.6" >
when in doubt, notify CAcert,
when in doubt, notify CAcert,
< / li > < li >
< / li > < li id = "s2.5.7" >
when in doubt, take other reasonable actions, such as
when in doubt, take other reasonable actions, such as
revoking certificates,
revoking certificates,
changing account credentials,
changing account credentials,
@ -563,20 +565,20 @@ You are also bound by
of which the principle ones effecting Members are:< / span >
of which the principle ones effecting Members are:< / span >
< / p > < / p >
< ol > < li > < ol > < li id = "s4.2.1" >
< a href = "//www.cacert.org/policy/CertificationPracticeStatement.php" >
< a href = "//www.cacert.org/policy/CertificationPracticeStatement.php" >
Certification Practice Statement< / a > (CPS => COD6).
Certification Practice Statement< / a > (CPS => COD6).
< / li > < li >
< / li > < li id = "s4.2.2" >
< a href = "//www.cacert.org/policy/DisputeResolutionPolicy.php" >
< a href = "//www.cacert.org/policy/DisputeResolutionPolicy.php" >
Dispute Resolution Policy< / a > (DRP => COD7).
Dispute Resolution Policy< / a > (DRP => COD7).
< / li > < li >
< / li > < li id = "s4.2.3" >
< a href = "http://www.cacert.org/index.php?id=10" >
< a href = "http://www.cacert.org/index.php?id=10" >
Privacy Policy< / a > (PP => COD5).
Privacy Policy< / a > (PP => COD5).
< / li > < li >
< / li > < li id = "s4.2.4" >
< span class = "change" > ADDED< span class = "change" > ADDED
< a href = "//www.cacert.org/policy/AssurancePolicy.php" >
< a href = "//www.cacert.org/policy/AssurancePolicy.php" >
Assurance Policy< / a > (DRP => COD7).
Assurance Policy< / a > (DRP => COD7).
< / li > < li >
< / li > < li id = "s4.2.5" >
< a href = "http://svn.cacert.org/CAcert/principles.html" >
< a href = "http://svn.cacert.org/CAcert/principles.html" >
Principles of the Community< / a > .
Principles of the Community< / a > .
< / li > < / ol > < / li > < / ol >
Ian Grigg
14 years ago