From 2da59c1e651f8232babd86036efa80e21ef94d0d Mon Sep 17 00:00:00 2001 From: Ian Grigg Date: Tue, 12 Jan 2010 22:56:49 +0000 Subject: [PATCH] results of Hamburg mini-TOP ON Assurance, 20091215 git-svn-id: http://svn.cacert.org/CAcert/Policies@1742 14b1bab8-4ef6-0310-b690-991c95c89dfd --- PolicyOnJuniorAssurersMembers.html | 210 +++++++++++++++++++++++++++++ 1 file changed, 210 insertions(+) create mode 100644 PolicyOnJuniorAssurersMembers.html diff --git a/PolicyOnJuniorAssurersMembers.html b/PolicyOnJuniorAssurersMembers.html new file mode 100644 index 0000000..034386b --- /dev/null +++ b/PolicyOnJuniorAssurersMembers.html @@ -0,0 +1,210 @@ + + + + + CACert -- Policy On Junior Assurers / Members + + + + + +

Policy On Junior Assurers / Members

+ +

+ CAcert Policy Status + Editor: Iang
+ Creation Date : 20091215
+ Status: WIP 20100112
+ Source: PoJAM2
+

+ +

0. Preliminaries

+

+ 0.1 Authority. + This sub-policy extends the + + Assurance Policy ("AP" => COD13) + by specifying how Juniors can be brought into the + CAcert Community. +

+ +

+ 0.2 Terms. +

+ + + +

1. Scope

+

+ 1.1 + This policy applies to all Members of the CAcert Community. +

+ + 1.2 + Although variations exist in different countries, CAcert works to a principle of no discrimination (Principles) and therefore imposes the same view across all countries. +

+ +

2. Entering the Community

+

+ 2.1 + There is no limit on age for membership of CAcert. +

+ +

+ 2.2 + Membership requires a legal contract to be formed. This can be formed one of two ways: +

+
    +
  1. the member has capacity to enter the contract themselves, or
    2. +
  2. the member is a Minor and requires the consent of the Parent.
    3. +
+ +

+ 2.3 + The Assurer is responsible in all cases for confirming that the entry into the CAcert Community Agreement is founded. This means in practice that the Assurer has to confirm the above. +

+ +

+ 2.4 + A general situation in each country is that a Minor can only enter with Parental consent. In this case, the Assurer should confirm the consent of the Parent. +

+ +

+ 2.5 + The mechanism for confirming the Parent's consent is something that varies and is not covered by policy. The simple requirement here is that the Assurer makes a reliable statement (CARS) that consent is established, following these two declarations: +

+
+ The Assurer's declaration (specifically referring to Assurance Policy 1.1 part 4 AP1.1): +
+
+ This Assurance conducted according to Assurance Policy +
+
+
+
+ The member's declaration: +
+
+ I agree to the CCA +
+
+
+ +

+ 2.6 + The Assurance Handbook (AH) should expand on common methods to establish and record consent. Such as, on a separate form, a modification to CAP form, etc. +

+ + +

3. System Block

+

+ 3.1 + Although there is no age limit in this policy, it is reasonable that the Assurer should check this issue closely below 18. +

+ +

+ 3.2 + For persons over 18, the Assurer may presume that the person has capacity to enter into a contract, in absence of any alternate suggestion. This is regardless of the legal circumstances of the country. +

+ +

+ 3.3 + Therefore, a change should be put into the system: +

+
+ If the member is under 18 years of age,
+ an additional button must be clicked during an Assurance,
+ confirming that consent is established, or otherwise as considered by the Assurer,
+ before additional higher reliance products are available. +
+

+ The system therefore will block all "reliance" products as defined by policy (issuance of named certificates under CPS, Assurer under AP), until the "minor consent established" button is clicked by the appropriate number of Assurers. +

+

+ The absence of this feature does not remove the duty of the Assurer (for example, because of delays in implementation). +

+ +

+ 3.4 + The first Assurers of a Member may then have the greater technical burden of explaining and confirming the consent, but the confirmation is required of all Assurers as part of the CAP. +

+ +

+ 3.5 + The Assurance Handbook (AH) should document more efficient methods, such as a single form carried by the Junior Member for showing to the Assurer, rather than the Parent's signature over each individual CAP form. +

+ + +

4. The Junior Assurer

+

+ 4.1 + Assurer status may only be granted if the user is at least 14 years old. Other preliminaries for the Assurer status set up by other policies are untouched. Combining AP and this policy, a Junior Assurer is a CAcert member with 100 Assurance Points, has passed the CAcert Assurer Challenge, and is between the ages of 14 and 18 years. +

+ +

+ 4.2 + A Junior Assurer can issue a maximum of 10 Assurance Points to an assuree, independent of how many Experience Points the Junior already has. The Experience Points awarded to the Junior Assurer are untouched. +

+ +

+ 4.3 + The Assurance Handbook (AH) + should stipulate the convention as to how the Junior Assurer establishes bona fides. +

+ + +

5. Arbitration

+

+ Arbitration with Juniors needs to take into account that a local court may find the CCA to be improperly imposed. Some understanding of this risk should be taken, but Arbitrators should be careful not to weaken the web of trust on this basis. Therefore, more care should be taken in explaining and ensuring the spirit of the CCA is maintained. +

+ +

+ The counter-situation to a weak CCA agreement is that if a person (of any age) feels the CCA to be inappropriate, then they have not entered into the Community. The Arbitrator is at liberty to terminate the CCA with a Member, if there is a sustainable view that it is inappropriate. Such termination should include measures needed to repair the web of trust. +

+ + + + + + +

+ Valid XHTML 1.1 +

+ + + +