@ -2,13 +2,13 @@
< html > < head > < html > < head >
< meta http-equiv = "CONTENT-TYPE" content = "text/html; charset=utf-8" > < title > Assurance Policy< / title > < meta http-equiv = "CONTENT-TYPE" content = "text/html; charset=utf-8" > < title > Assurance Policy< / title >
< meta name = "GENERATOR" content = "OpenOffice.org 2.3 (Unix)" >
< meta name = "CREATED" content = "20080530;0" > < meta name = "CREATED" content = "20080530;0" >
< meta name = "CHANGEDBY" content = "Teus Hagen" >
< meta name = "CHANGED" content = "20080707;15011800" >
< meta name = "CREATEDBY" content = "Ian Grigg" > < meta name = "CREATEDBY" content = "Ian Grigg" >
< meta name = "CHANGEDBY" content = "Teus Hagen" > < meta name = "CHANGEDBY" content = "Teus Hagen" >
< meta name = "CHANGEDBY" content = "Robert Cruikshank" > < meta name = "CHANGEDBY" content = "Robert Cruikshank" >
< meta name = "CHANGEDBY" content = "Teus Hagen" > < meta name = "CHANGEDBY" content = "Teus Hagen" >
< meta name = "CHANGED" content = "20080703;16423900" >
< style type = "text/css" > < style type = "text/css" >
<!-- <!--
P { color: #000000 }
P { color: #000000 }
@ -22,6 +22,7 @@ TH P { color: #000000 }
-->
-->
< / style > < / style >
< / head > < / head >
< body style = "direction: ltr; color: rgb(0, 0, 0);" lang = "en-GB" > < body style = "direction: ltr; color: rgb(0, 0, 0);" lang = "en-GB" >
< h1 > Assurance Policy for CAcert Community Members< / h1 > < h1 > Assurance Policy for CAcert Community Members< / h1 >
< p > < a href = "PolicyOnPolicy.html" > < img src = "Images/cacert-wip.png" name = "graphics1" alt = "CAcert Policy Status" align = "bottom" border = "0" height = "33" width = "90" > < / a > < p > < a href = "PolicyOnPolicy.html" > < img src = "Images/cacert-wip.png" name = "graphics1" alt = "CAcert Policy Status" align = "bottom" border = "0" height = "33" width = "90" > < / a >
@ -29,37 +30,36 @@ TH P { color: #000000 }
Author: Ian Grigg< br >
Author: Ian Grigg< br >
Creation date: 2008-05-30< br >
Creation date: 2008-05-30< br >
Last change by: Teus Hagen< br >
Last change by: Teus Hagen< br >
Last change date: 2008-07-03 21:12 MET< br >
Last change date: 2008-07-07 15:03 MET< br >
Status: WIP
Status: WIP 2008-05-30< br >
2008-05-30< br >
Next status: DRAFT June 2008 < / p >
Next status: DRAFT June 2008 < / p >
< h2 class = "western" > 0. Preamble< / h2 > < h2 > 0. Preamble< / h2 >
< p > Definitions of terms: < / p > < p > Definitions of terms: < / p >
< dl > < dl >
< dt > < em > Member< / em > < / dt > < dt > < em > Member< / em > < / dt >
< dd > A Member is an individual who has agreed to the CAcert< dd > A Member is an individual who has agreed to the CAcert
Community Agreement (< a href = "http://www.cacert.org/policy/CAcertCommunityAgreement.php" target = "_blank" > CCA< / a > ) and has created successfully
Community Agreement (< a href = "http://www.cacert.org/policy/CAcertCommunityAgreement.php" target = "_blank" > CCA< / a > ) and has created successfully
a CAcert login
a CAcert login account on the CAcert web site. < / dd >
account on the CAcert web site.< / dd >
< dt > < em > Assurance< / em > < / dt > < dt > < em > Assurance< / em > < / dt >
< dd > Assurance is the process by which a Member of CAcert< dd > Assurance is the process by which a Member of CAcert
Community (Assurer) identifies an individual (< span lang = "en-US" > Assuree< / span > ).< / dd >
Community (Assurer) identifies an individual (< span lang = "en-US" > Assuree< / span > ).
< dt style = "font-style: italic;" > Prospective Member< / dt > < / dd >
< dd > An individual who has been assured in an Assurance process,< dt > < i > Prospective Member< / i > < / dt >
but has not yet created successfully a CAcert login account.< / dd >
< dd > An individual who has been assured in an Assurance
process, but has not yet created successfully a CAcert login account. < / dd >
< dt > < em > Name< / em > < / dt > < dt > < em > Name< / em > < / dt >
< dd > A Name is the full name of an individual: first name(s), < dd > A Name is the full name of an individual, with all
family name(s), name extensions, abbreviation of name(s), etc. < br > components of that name.< / dd >
The Name < dd > (Title(s), first name(s), family name(s), name extensions,
is technically spoken a string exactly taken e.g. from a governmental abbreviation of name(s), etc. < br >
issued The Name is technically spoken a string exactly taken e.g. from a
photo ID. < / dd >
governmental issued photo ID.) < / dd >
< dt > < em > Secondary Distinguishing Feature< / em > < dt > < em > Secondary Distinguishing Feature< / em >
(DoB) < / dt >
(DoB) < / dt >
< dd style = "margin-bottom: 0.5cm;" > A Name for an< dd > A Name for an individual is discriminated from similar
individual is discriminated from similar full names by a secondary full names by a secondary distinguished feature, as recorded on the
distinguished feature, as recorded on the on-line CAcert (web) account.on-line CAcert (web) account. < br >
< br > < / dd > ( Currently this is the date of birth (DoB) of the individual. ) < / dd >
< / dl > < / dl >
< h3 > < h3 >
The CAcert Web of Trust< / h3 >
The CAcert Web of Trust< / h3 >
@ -89,41 +89,38 @@ experience and circumstances. It is also more readable. </p>
and CAcert Policy Statement (< a href = "http://svn.cacert.org/CAcert/policy.htm" target = "_blank" > CPS< / a > ).
and CAcert Policy Statement (< a href = "http://svn.cacert.org/CAcert/policy.htm" target = "_blank" > CPS< / a > ).
< / p > < / p >
< h2 > 1. Assurance Purpose< / h2 > < h2 > 1. Assurance Purpose< / h2 >
< p > The purpose of Assurance is to add < i > confidence< / i > < p > The purpose of Assurance is to add < span style = "font-style: normal;" > confidence< / span >
in the
in the Assurance Statement made by the CAcert Community of a Member. < / p >
Assurance Statement made by the CAcert Community of a Member. < / p >
< p > With sufficient assurances, a Member may: (a) issue< p > With sufficient assurances, a Member may: (a) issue
certificates
certificates
with their assured Name included, (b) participate in assuring others,
with their assured Name included, (b) participate in assuring others,
and (c)
and (c) other related activities. The strength of these activities is
other related activities. The strength of these activities is based
based on the strength of the assurance. < / p >
on the strength of the assurance. < / p >
< h3 > The Assurance Statement< / h3 > < h3 > The Assurance Statement< / h3 >
< p > The following claims can be made about a person who is< p > The following claims can be made about a person who is
assured: < / p >
assured: < / p >
< ol > < ol >
< li > < li >
< p > The person is a bona< p > The person is a bona fide Member. In other words, the
fide Member. In other words, the person is a member of the CAcertperson is a member of the CAcert Community as defined by the CAcert
Community as defined by the CAcert Community Agreement (< a href = "http://www.cacert.org/policy/CAcertCommunityAgreement.php" target = "_blank" > CCA< / a > ); < / p > Community Agreement (< a href = "http://www.cacert.org/policy/CAcertCommunityAgreement.php" target = "_blank" > CCA< / a > ); < / p >
< / li > < / li >
< li > < li >
< p > The Member has a< p > The Member has a (login) account with CAcert's on-line
(login) account with CAcert's on-line registration and service system; < / p > registration and service system; < / p >
< / li > < / li >
< li > < li >
< p > The Member can be< p > The Member can be determined from any CAcert certificate
determined from any CAcert certificate issued by the Account; < / p > issued by the Account; < / p >
< / li > < / li >
< li > < li >
< p > The Member is bound< p > The Member is bound into CAcert's Arbitration as defined
into CAcert's Arbitration as defined by the CCA a greement; < / p > by the Community A greement; < / p >
< / li > < / li >
< li > < li >
< p > Some personal details of the Member are known to CAcert:< p > Some personal details of the Member are known to CAcert:
the personal Name(s), primary and other listed email address(es),
the individual Name(s), primary and other listed individual email
secondary
address(es), secondary distinguished feature (e.g. DoB). < / p >
distinguished feature (e.g. DoB). < / p >
< / li > < / li >
< / ol > < / ol >
< p > The confidence level of the Assurance Statement is expressed< p > The confidence level of the Assurance Statement is expressed
@ -131,20 +128,20 @@ by
the Assurance Points. < / p >
the Assurance Points. < / p >
< h3 > Relying Party Statement< / h3 > < h3 > Relying Party Statement< / h3 >
< p > The primary goal of the Assurance Statement is for the express< p > The primary goal of the Assurance Statement is for the express
purpose of certificates to meet the
purpose of certificates to meet the needs of the < em > Relying
needs Party
of the < em > Relying Party Statement< / em > , which latter isStatement< / em > , which latter is found in the Certification
found in th ePractic e
Certification Practice Statement (< a href = "http://svn.cacert.org/CAcert/policy.htm" target = "_blank" > CPS< / a > ).Statement (< a href = "http://svn.cacert.org/CAcert/policy.htm" target = "_blank" > CPS< / a > ).
< / p > < / p >
< p > When a certificate is issued, some of the Assurance Statement< p > When a certificate is issued, some of the Assurance Statement
may
may
be incorporated, e.g. Name. Other parts may be implied, e.g.
be incorporated, e.g. Name. Other parts may be implied, e.g.
Membership, exact account and status. They all are part of the < em > Relying
Membership, exact account and status. They all are part of the
Party Statement< / em > . In short, this means that other Members of
< em > Relying < / em > . In short, this means that
the
o ther
Community may rely on the information verified by Assurance and found
Members of the Community may rely on the information verified by
in the certificate. < / p >
Assurance and found in the certificate. < / p >
< p > In particular, certificates are sometimes considered to< p > In particular, certificates are sometimes considered to
provide
provide
reliable indications of e.g. the Member's Name and email address. The
reliable indications of e.g. the Member's Name and email address. The
@ -153,31 +150,31 @@ policies and processes should be understood as limitations on any
reliance. < / p >
reliance. < / p >
< h2 > 2. The Member< / h2 > < h2 > 2. The Member< / h2 >
< h3 > The Name in the CAcert login account< / h3 > < h3 > The Name in the CAcert login account< / h3 >
< p lang = "en-AU" > At least one Name is recorded in the< p lang = "en-AU" > At least one individual Name is recorded
CAcert login
in the
account. The Name is recorded as a string of (encoded) characters.< / p >
CAcert login account. The Name is recorded as a string of characters,
encoded in < span lang = "en-US" > unicode< / span >
transformation format.< / p >
< p lang = "en-AU" > A Name should be as fully written in a< p lang = "en-AU" > A Name should be as fully written in a
government-issued identity document (ID). A Name should be as complete
government-issued identity document (ID). A Name should be as
as possible, e.g. not abbreviated, no transliteration of characters in complete as possible, that is not abbreviated, no transliteration of
the Name.< / p >
characters in the Name.< / p >
< p lang = "en-AU" > A Name in the CAcert login account, which< p lang = "en-AU" > A Name in the CAcert login account, which
has reached the applicable level of 50 Assurance Point is defined as an
has reached
Assured Name. AN Assured Name can be used in a certificate issued by
the applicable level of 50 Assurance Point is defined as an Assured
CAcert. A Member with at least one Assured Name has reached the Assured
Name. An Assured Name can be used in a certificate issued by CAcert.
A Member with at least one Assured Name has reached the Assured
Member status.< / p >
Member status.< / p >
< h3 > Multiple Names and variations< / h3 > < h3 > Multiple Names and variations< / h3 >
< p > A Member may have multiple Names or multiple variations of a< p > A Member may have multiple Names or multiple variations of a
Name.
Name.
For example, married name, variations of initials of first or middle
For example, married name, variations of initials of first or middle
names, abbreviation of a first name, different language or country
names, abbreviation of a first name, different language or country
variations and transliterations of characters in a name. < / p >
variations and transliterations of characters in a name.< / p >
< p > The login< p > The login account may record multiple Names. Each of the
account may record multiple Names. Each of the Assured Names
Assured
can be selected to be used in a
Names can be selected to be used in a certificate issued by CAcert.< / p >
certificate issued by CAcert.< / p >
< h3 > < strike > FOLLOWING GOES TO ASSURER HANDBOOK< / strike > < / h3 >
< h3 > < strike > FOLLOWING GOES TO
ASSURER
HANDBOOK< / strike > < / h3 >
< h3 > < strike > Comparison of names< / strike > < / h3 > < h3 > < strike > Comparison of names< / strike > < / h3 >
< p > < strike > < a href = "http://en.wikipedia.org/wiki/Transliteration" target = "_blank" > Transliteration< / a > < p > < strike > < a href = "http://en.wikipedia.org/wiki/Transliteration" target = "_blank" > Transliteration< / a >
of characters as defined in the transliteration character table (< a href = "http://svn.cacert.org/CAcert/Policies/transtab.utf" target = "_blank" > UTF
of characters as defined in the transliteration character table (< a href = "http://svn.cacert.org/CAcert/Policies/transtab.utf" target = "_blank" > UTF
@ -185,7 +182,7 @@ Transtab</a>) for names is permitted, but the result must be
7-bit
7-bit
ASCII for the full name. Transliteration is one way and is towards
ASCII for the full name. Transliteration is one way and is towards
7-bit ASCII. Transliteration is a way to compare two names. However
7-bit ASCII. Transliteration is a way to compare two names. However
transliteration of a Name makes the Name less discriminative. < / strike > < / p >
transliteration of a Name makes the Name less discriminative.< / strike > < / p >
< p > < strike > In general names are handled case insensitively.< / strike > < / p > < p > < strike > In general names are handled case insensitively.< / strike > < / p >
< p > < strike > Abbreviation of second given name(s), middle< p > < strike > Abbreviation of second given name(s), middle
name(s),
name(s),
@ -195,24 +192,22 @@ the first given name in the ID document is abbreviated, the first
given name in the web account Name may be abbreviated. Abbreviation
given name in the web account Name may be abbreviated. Abbreviation
of a name makes the name less discriminative.< / strike > < / p >
of a name makes the name less discriminative.< / strike > < / p >
< p > < strike > A Name on an ID which has initials< p > < strike > A Name on an ID which has initials
(abbreviations) for titles,
(abbreviations) for
name extensions and given names, and/or transliterations as defined in
titles, name extensions and given names, and/or transliterations as
the transliteration table can be taken into account for assurance for a
defined in the transliteration table can be taken into account for
Name in the account which is not abbreviated or transliterated.< / strike > < / p >
assurance for a Name in the account which is not abbreviated or
transliterated.< / strike > < / p >
< p > < strike > Titles and name extensions in the name of an< p > < strike > Titles and name extensions in the name of an
individual
individual
may be omitted.< / strike > < / p >
may be omitted.< / strike > < / p >
< p > < strike > The assurance ambition is to < font color = "#000000" > pursue< / font > < p > < strike > The assurance ambition is to pursue
a highly discriminative assured Name in the account. The ambition is to
a highly discriminative assured Name in the account. The ambition is
have only a Name
to have only a Name in the account which has no abbreviation(s), no
in the account which has no abbreviation(s), no transliteration and is
transliteration and is case sensitive.< / strike > < / p >
case
< h3 > < strike > FOLLOWING GOES TO Certficate
< font color = "#000000" > sensitive< / font > .< / strike > < / p > Implementation Policy < / strike >
< h3 > < strike > FOLLOWING GOES TO
Certficate Implementation Policy < / strike >
< / h3 > < / h3 >
< h3 > < strike > Names on the certificate< h3 > < strike > Names on the certificate issued by CAcert< / strike > < / h3 >
issued by CAcert< / strike > < / h3 >
< p > < strike > The Certificate Implementation Policy (< a href = "http://svn.cacert.org/CAcert/Policies/CertificateImplementationPolicy.html" target = "_blank" > CIP< / a > )< p > < strike > The Certificate Implementation Policy (< a href = "http://svn.cacert.org/CAcert/Policies/CertificateImplementationPolicy.html" target = "_blank" > CIP< / a > )
will define the fields added by CAcert on the issued certificate on
will define the fields added by CAcert on the issued certificate on
request of the Member.< / strike > < / p >
request of the Member.< / strike > < / p >
@ -222,13 +217,11 @@ issued certificate is dependent on the assurance of the Name in the
web account. Abbreviation and transliteration handling in the CN is
web account. Abbreviation and transliteration handling in the CN is
defined in the Certificate Implementation Policy and is similar to
defined in the Certificate Implementation Policy and is similar to
the name comparison as defined in this policy. However the Common
the name comparison as defined in this policy. However the Common
Name may become less discriminative < font color = "#000000" > as< / font > < font color = "#000000" >
Name may become less discriminative as than
than< / font > the assured Name as the unique certificate serial
the assured Name as the unique certificate serial number will lead to
number
the account of the individual in a unique way, and in this way to the
will lead to the account of the individual in a unique way, and in
Name and email address of the individual or organisation. The first
this way to the Name and email address of the individual or
given name in the Common Name may be abbreviated on request.< / strike > < / p >
organisation. The first given name in the Common Name may be
abbreviated on request.< / strike > < / p >
< p > < strike > The certificate issued by CAcert can have on< p > < strike > The certificate issued by CAcert can have on
request of
request of
the Member the SubjAltName field. The name as defined by the Member
the Member the SubjAltName field. The name as defined by the Member
@ -322,25 +315,25 @@ is not checked by CAcert.</strike></p>
< / tbody > < / tbody >
< / table > < / table >
< p align = "center" > < strike > < font size = "2" > table< p align = "center" > < strike > < font size = "2" > table
Examples of names in different contexts< / font > < / strike > < / p >
Examples of names in
different contexts< / font > < / strike > < / p >
< h3 > Status and Capabilities< / h3 > < h3 > Status and Capabilities< / h3 >
< p > A Member has the following capabilities derived from an< p > A Member has the following capabilities derived from
Assurance:
Assurance: < / p >
< / p >
< table border = "1" cellpadding = "5" cellspacing = "0" > < table border = "1" cellpadding = "5" cellspacing = "0" >
< tbody > < tbody >
< tr > < tr >
< td width = "10%" > < td width = "10%" >
< p align = "left" > < em> Minimum Assurance Points< / em > < / p > < p align = "left" > < i> Minimum Assurance Points< / i > < / p >
< / td > < / td >
< td width = "15%" > < td width = "15%" >
< p align = "left" > < em> Capability< / em > < / p > < p align = "left" > < i> Capability< / i > < / p >
< / td > < / td >
< td width = "15%" > < td width = "15%" >
< p align = "left" > < i > Status< / i > < / p > < p align = "left" > < i > Status< / i > < / p >
< / td > < / td >
< td width = "60 "> < td width = "60 % ">
< p align = "left" > < em> Comment< / em > < / p > < p align = "left" > < i> Comment< / i > < / p >
< / td > < / td >
< / tr > < / tr >
< tr valign = "top" > < tr valign = "top" >
@ -348,7 +341,7 @@ Assurance:
< p align = "center" > 0< / p > < p align = "center" > 0< / p >
< / td > < / td >
< td > < td >
< p align = "left" > assurance of a Nam e< / p > < p align = "left" > Request Assuranc e< / p >
< / td > < / td >
< td > < td >
< p align = "left" > Prospective Member< / p > < p align = "left" > Prospective Member< / p >
@ -397,7 +390,7 @@ assured to 50 Assurance Points or more</p>
< p align = "left" > become an Assurer< / p > < p align = "left" > become an Assurer< / p >
< / td > < / td >
< td > < td >
< p align = "left" > p rospective Assurer< / p > < p align = "left" > P rospective Assurer< / p >
< / td > < / td >
< td > < td >
< p align = "left" > Assured to 100 Assurance Points (or< p align = "left" > Assured to 100 Assurance Points (or
@ -412,17 +405,13 @@ Assurance Capability</i></font></p>
for an
for an
assurance process.< / p >
assurance process.< / p >
< p > The CAcert Policy Statement (< a href = "http://svn.cacert.org/CAcert/policy.htm" target = "_blank" > CPS< / a > )< p > The CAcert Policy Statement (< a href = "http://svn.cacert.org/CAcert/policy.htm" target = "_blank" > CPS< / a > )
and other policies may list
and other policies may list other capabilities that rely on Assurance
other capabilities that rely on Assurance Points. < / p >
Points. < / p >
< p > If there is negative confidence the Assurer should consider
filing
a dispute.< / p >
< h2 > 3. The Assurer< / h2 > < h2 > 3. The Assurer< / h2 >
< p > An Assurer is a Member with the following: < / p > < p > An Assurer is a Member with the following: < / p >
< ul > < ul >
< li > < li >
< p > Is assured to a minimum< p > Is assured to a minimum of 100 Assurance Points; < / p >
of 100 Assurance Points; < / p >
< / li > < / li >
< li > < li >
< p > Has passed the CAcert Assurer Challenge. < / p > < p > Has passed the CAcert Assurer Challenge. < / p >
@ -434,28 +423,26 @@ behalf of the Assurance Officer. </p>
< p > The Assurer is obliged to: < / p > < p > The Assurer is obliged to: < / p >
< ul > < ul >
< li > < li >
< p > Follow this Assurance< p > Follow this Assurance Policy; < / p >
Policy; < / p >
< / li > < / li >
< li > < li >
< p > Follow any additional< p > Follow any additional rules of detail laid out by the
rules of detail laid out by the CAcert Assurance Officer; < / p > CAcert Assurance Officer; < / p >
< / li > < / li >
< li > < li >
< p > Be guided by the CAcert < a href = "http://wiki.cacert.org/wiki/AssuranceHandbook2" target = "_blank" > Assurance Handbook< / a > in their< p > Be guided by the CAcert < a href = "http://wiki.cacert.org/wiki/AssuranceHandbook2" target = "_blank" > Assurance Handbook< / a > in their
judgement; < / p >
judgement; < / p >
< / li > < / li >
< li > < li >
< p > Make a good faith< p > Make a good faith effort at identifying and verifying
effort at identifying and verifying Members; < / p > Members; < / p >
< / li > < / li >
< li > < li >
< p > Maintain the< p > Maintain the documentation on each Assurance; < / p >
documentation on each Assurance; < / p >
< / li > < / li >
< li > < li >
< p > Deliver documentation< p > Deliver documentation to Arbitration, or as otherwise
to Arbitration, or as otherwise directed by the Arbitrator; < / p > directed by the Arbitrator; < / p >
< / li > < / li >
< li > < li >
< p > Keep up-to-date with developments within the CAcert< p > Keep up-to-date with developments within the CAcert
@ -469,37 +456,32 @@ Member. </p>
< p > The process consists of: < / p > < p > The process consists of: < / p >
< ol > < ol >
< li > < li >
< p > Voluntary agreement by< p > Voluntary agreement by both Assurer and Member or
both Assurer and Member or < font color = "#000000" > Prospective< / font >
Prospective Member to conduct the Assurance; < / p >
Member to conduct
the Assurance; < / p >
< / li > < / li >
< li > < li >
< p > Personal meeting of< p > Personal meeting of Assurer and Member or Prospective
Assurer and Member or < font color = "#000000" > Prospective< / font >
Member; < / p >
Member; < / p >
< / li > < / li >
< li > < li >
< p > Recording of essential< p > Recording of essential details on CAcert Assurance
details on CAcert Assurance Programme form; < / p > Programme form; < / p >
< / li > < / li >
< li > < li >
< p > Examination of Identity< p > Examination of Identity documents by Assurer and
documents by Assurer and verification of recorded details (the Name(s)
verification of recorded details (the Name(s) and Secondary
and
Distinguishing Feature, e.g., DoB); < / p >
Secondary Distinguishing Feature, e.g., DoB); < / p >
< / li > < / li >
< li > < li >
< p > Allocation of Assurance< p > Allocation of Assurance Points by Assurer; < / p >
Points by Assurer; < / p >
< / li > < / li >
< li > < li >
< p > Optional: supervision< p > Optional: supervision of reciprocal Assurance made by
of reciprocal Assurance made by Assuree (Mutual Assurance); < / p > Assuree (Mutual Assurance); < / p >
< / li > < / li >
< li > < li >
< p > Safe keeping of the CAcert Assurance Programme forms by < p > Safe keeping of the CAcert Assurance Programme (< a href = "http://www.cacert.org/cap.php" target = "_blank" > CAP< / a > )
Assurer. < / p >
forms by Assurer. < / p >
< / li > < / li >
< / ol > < / ol >
< h3 > Mutual Assurance< / h3 > < h3 > Mutual Assurance< / h3 >
@ -516,9 +498,8 @@ the
Assurer, and reduces any sense of power. It is also an important aid
Assurer, and reduces any sense of power. It is also an important aid
to the assurance training for future Assurers. < / p >
to the assurance training for future Assurers. < / p >
< h3 > Evidence of Assurer status< / h3 > < h3 > Evidence of Assurer status< / h3 >
< p > On the< p > On the question of providing evidence that one is an Assurer,
question of providing evidence that one is an Assurer, CAcert Policy
CAcert Policy Statement (< a href = "http://svn.cacert.org/CAcert/policy.htm#p3.2" target = "_blank" > CPS< / a > )
Statement (< a href = "http://svn.cacert.org/CAcert/policy.htm#p3.2" target = "_blank" > CPS< / a > )
says:< em > "The level at which each Member is Assured is public
says:< em > "The level at which each Member is Assured is public
data. The number of Assurance Points for each Member is not
data. The number of Assurance Points for each Member is not
published.< / em > .".< / p >
published.< / em > .".< / p >
@ -538,16 +519,13 @@ the maximum means that the Assurer is 100% confident in the
information presented: < / p >
information presented: < / p >
< ul > < ul >
< li > < li >
< p > Detail on form, system,< p > Detail on form, system, documents, person in accordance; < / p >
documents, person in accordance; < / p >
< / li > < / li >
< li > < li >
< p > Sufficient quality< p > Sufficient quality identity documents have been checked; < / p >
identity documents have been checked; < / p >
< / li > < / li >
< li > < li >
< p > Assurer's familiarity< p > Assurer's familiarity with identity documents; < / p >
with identity documents; < / p >
< / li > < / li >
< li > < li >
< p > The Assurance Statement is confirmed. < / p > < p > The Assurance Statement is confirmed. < / p >
@ -573,13 +551,19 @@ maximum of Assurance Points per Name; a (new) Member new to the
assurance process should allocate < em > zero< / em > Assurance
assurance process should allocate < em > zero< / em > Assurance
Points
Points
until they get some confidence in what is happening.< / p >
until they get some confidence in what is happening.< / p >
< p > To< p > < strike > To reach 50 Assurance Points for a Name the
reach 50 Assurance Points for a Name the Member must have had at least
Member must
two assurances on that Name: the Assured Member has an Assured
have had at least two assurances on that Name: the Assured Member has
Name. To reach 100 Assurance Points, at
at least one Name assured, the Assured Name. To reach 100 Assurance
least one Name of the Assured Member must have been assured at least
Points, at least one Name of the Assured Member must have been
three
assured at least three times.< / strike > < / p >
times. < / p >
< p style = "text-decoration: none;" > The maximum number of
Assurance
Points, which can be allocated for a Name assurance under this policy
and subsidiary policies is 50 Assurance Points.< / p >
< p > If there is negative confidence the Assurer should consider
filing
a dispute.< / p >
< h3 > Experience Points< / h3 > < h3 > Experience Points< / h3 >
< p > The maximum number of Assurance Points that may be awarded by< p > The maximum number of Assurance Points that may be awarded by
an
an
@ -663,31 +647,28 @@ recommendation from the Assurance Officer. </p>
< p > Experience Points are not to be confused with Assurance< p > Experience Points are not to be confused with Assurance
Points. < / p >
Points. < / p >
< h3 > CAcert Assurance Programme (CAP) form< / h3 > < h3 > CAcert Assurance Programme (CAP) form< / h3 >
< p > The CAcert Assurance Programme (< a href = "http://www.cacert.org/cap.php" target = "_blank" > CAP< / a > )< p > The CAcert Assurance Programme (< a href = "http://www.cacert.org/cap.php" target = "_blank" > CAP< / a > )
form requests the
form requests the following details of each Member or Prospective
following
Member: < / p >
details of each Member or Prospective Member: < / p >
< ul > < ul >
< li > < li >
< p > Name(s), as recorded in< p > Name(s), as recorded in the on-line account; < / p >
the on-line account; < / p >
< / li > < / li >
< li > < li >
< p > Primary email address,< p > Primary email address, as recorded in the on-line account;
as recorded in the on-line account; < / p > < / p >
< / li > < / li >
< li > < li >
< p > Secondary< p > Secondary Distinguishing Feature, as recorded in the
Distinguishing Feature, as recorded in the on-line account (normally,
on-line account (normally, date of birth); < / p >
date of birth); < / p >
< / li > < / li >
< li > < li >
< p > Statement of agreement< p > Statement of agreement with the CAcert Community
with the CAcert Community Agreement (CCA) ; < / p > Agreement; < / p >
< / li > < / li >
< li > < li >
< p > Permission to the< p > Permission to the Assurer to conduct the Assurance
Assurer to conduct the Assurance (required for privacy reasons); < / p > (required for privacy reasons); < / p >
< / li > < / li >
< li > < li >
< p > Date and signature of the Assuree. < / p > < p > Date and signature of the Assuree. < / p >
@ -696,21 +677,20 @@ Assurer to conduct the Assurance (required for privacy reasons); </p>
< p > The CAP form requests the following details of the Assurer: < / p > < p > The CAP form requests the following details of the Assurer: < / p >
< ul > < ul >
< li > < li >
< p > At least one Name as< p > At least one Name as recorded in the on-line account of
recorded in the on-line account of the Assurer; < / p > the Assurer; < / p >
< / li > < / li >
< li > < li >
< p > Assurance Points for< p > Assurance Points for each Name in the identity
each Name in the identity document(s); < / p > document(s); < / p >
< / li > < / li >
< li > < li >
< p > Statement of Assurance;< p > Statement of Assurance; < / p >
< / p >
< / li > < / li >
< li > < li >
< p > Optional: If the< p > Optional: If the Assurance is reciprocal, then the
Assurance is reciprocal, then the Assurer's email address and SecondaryAssurer's email address and Secondary Distinguishing Feature are
Distinguishing Feature are required as well; < / p > required as well; < / p >
< / li > < / li >
< li > < li >
< p > Date, location of Assurance and signature of Assurer. < / p > < p > Date, location of Assurance and signature of Assurer. < / p >
@ -724,37 +704,34 @@ Officer
with the following responsibilities: < / p >
with the following responsibilities: < / p >
< ul > < ul >
< li > < li >
< p > Reporting to the< p > Reporting to the Committee and advising on all matters to
Committee and advising on all matters to do with Assurance; < / p > do with Assurance; < / p >
< / li > < / li >
< li > < li >
< p > Training and testing of< p > Training and testing of Assurers, in association with the
Assurers, in association with the Education Team; < / p > Education Team; < / p >
< / li > < / li >
< li > < li >
< p > Updating this Assurance< p > Updating this Assurance Policy, under the process
Policy, under the process established by Policy on Policy (< a href = "https://www.cacert.org/policy/PolicyOnPolicy.php" target = "_blank" > PoP< / a > ); < / p > established by Policy on Policy (< a href = "https://www.cacert.org/policy/PolicyOnPolicy.php" target = "_blank" > PoP< / a > ); < / p >
< / li > < / li >
< li > < li >
< p > Management of all< p > Management of all Subsidiary Policies (see below) for
Subsidiary Policies (see below) for Assurances, under Policy on Policy;
Assurances, under Policy on Policy; < / p >
< / p >
< / li > < / li >
< li > < li >
< p > Managing and creating< p > Managing and creating rules of detail or procedure where
rules of detail or procedure where inappropriate for policies; < / p > inappropriate for policies; < / p >
< / li > < / li >
< li > < li >
< p > Incorporating rulings< p > Incorporating rulings from Arbitration into policies,
from Arbitration into policies, procedures or guidelines; < / p > procedures or guidelines; < / p >
< / li > < / li >
< li > < li >
< p > Assisting the< p > Assisting the Arbitrator in any requests; < / p >
Arbitrator in any requests; < / p >
< / li > < / li >
< li > < li >
< p > Managing the Assurer< p > Managing the Assurer Handbook; < / p >
Handbook; < / p >
< / li > < / li >
< li > < li >
< p > Maintaining a sufficient strength in the Assurance process< p > Maintaining a sufficient strength in the Assurance process
@ -766,9 +743,9 @@ Handbook; </p>
additional
additional
processes. Each must be covered by an approved Subsidiary Policy
processes. Each must be covered by an approved Subsidiary Policy
(refer to Policy on Policy => CAcert Official Document COD1).
(refer to Policy on Policy => CAcert Official Document COD1).
Subsidiary Policies specify
Subsidiary Policies specify any additional tests of knowledge
any additional tests of knowledge required and variations to processrequired and variations to process and documentation, within the
and documentation, within the general standard stated here. < / p > general standard stated here. < / p >
< h3 > Standard< / h3 > < h3 > Standard< / h3 >
< p > Each Subsidiary Policy must augment and improve the general< p > Each Subsidiary Policy must augment and improve the general
standards in this Assurance Policy. It is the responsibility of each
standards in this Assurance Policy. It is the responsibility of each
@ -778,9 +755,10 @@ areas of risk. </p>
< h3 > High Risk Applications< / h3 > < h3 > High Risk Applications< / h3 >
< p > In addition to the Assurance or Experience Points ratings set< p > In addition to the Assurance or Experience Points ratings set
here
here
in and in other policies, Assurance Officer or policies can designate
in and in other policies, Assurance Officer or policies can
certain applications as high risk. If so, additional measures may be
designate certain applications as high risk. If so, additional
added to the Assurance process that specifically address the risks.< / p >
measures may be added to the Assurance process that specifically
address the risks.< / p >
< p > Additional measures may include additional information.< p > Additional measures may include additional information.
Additional
Additional
information can be required in process of assurance: < / p >
information can be required in process of assurance: < / p >
@ -791,13 +769,12 @@ information can be required in process of assurance: </p>
< / li > < / li >
< li > < dd > photo of User; < / dd > < li > < dd > photo of User; < / dd >
< / li > < / li >
< li > < dd style = "margin-bottom: 0.5cm;" > address of< li > < dd > address of User. < / dd >
User. < / dd >
< / li > < / li >
< / ul > < / ul >
< p > Additional Information is to be kept by Assurer, attached to< p > Additional Information is to be kept by Assurer, attached to
CAcert Assurance Programme (< a href = "http://www.cacert.org/cap.php" target = "_blank" > CAP< / a > ) form. Assurance Points
CAcert Assurance Programme (< a href = "http://www.cacert.org/cap.php" target = "_blank" > CAP< / a > )
allocation by this assurance is unchanged.
form. Assurance Points allocation by this assurance is unchanged.
User's CAcert login account should be annotated to record type of
User's CAcert login account should be annotated to record type of
additional information: < / p >
additional information: < / p >
< ul > < ul >
@ -805,14 +782,13 @@ additional information: </p>
< p > Arbitration: < / p > < p > Arbitration: < / p >
< ul > < ul >
< li > < li >
< p > Member to< p > Member to participate in Arbitration. This confirms
participate in Arbitration. This confirms their acceptance of the forum their acceptance of the forum as well as trains in the process and
as well as trains in the process and import < / p > import < / p >
< / li > < / li >
< li > < li >
< p > Member to file< p > Member to file Arbitration to present case. This
Arbitration to present case. This allows Arbitrator as final authority;
allows Arbitrator as final authority; < / p >
< / p >
< / li > < / li >
< / ul > < / ul >
< / li > < / li >
@ -820,12 +796,11 @@ Arbitration to present case. This allows Arbitrator as final authority;
< p > Additional training; < / p > < p > Additional training; < / p >
< / li > < / li >
< li > < li >
< p > Member to be Assurer< p > Member to be Assurer (at least 100 Assurance Points and
(at least 100 Assurance Points and passed Assurer Challenge); < / p > passed Assurer Challenge); < / p >
< / li > < / li >
< li > < li >
< p > Member agrees to< p > Member agrees to additional specific agreement(s); < / p >
additional specific agreement(s); < / p >
< / li > < / li >
< li > < li >
< p > Additional checking/auditing of systems data by CAcert< p > Additional checking/auditing of systems data by CAcert
@ -846,14 +821,13 @@ internal purposes. </p>
circumstances: < / p >
circumstances: < / p >
< ul > < ul >
< li > < li >
< p > Under Arbitrator< p > Under Arbitrator ruling, in a duly filed dispute (< a href = "http://www.cacert.org/policy/DisputeResolutionPolicy.html" target = "_blank" > Dispute Resolution Policy< / a >
ruling, in a duly filed dispute (< a href = "http://www.cacert.org/policy/DisputeResolutionPolicy.html" target = "_blank" > Dispute Resolution Policy< / a >
=> COD7); < / p >
=> COD7); < / p >
< / li > < / li >
< li > < li >
< p > An Assurer in the< p > An Assurer in the process of an Assurance, as permitted on
process of an Assurance, as permitted on the CAcert Assurance Programme the CAcert Assurance Programme (< a href = "http://www.cacert.org/cap.php" target = "_blank" > CAP< / a > )
(CAP) form; < / p > form; < / p >
< / li > < / li >
< li > < li >
< p > CAcert support administration and CAcert systems< p > CAcert support administration and CAcert systems
Teus Hagen
16 years ago