cacert/cacert-policies
9
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

fixed mimetype

Browse source 
git-svn-id: http://svn.cacert.org/CAcert/Policies@851 14b1bab8-4ef6-0310-b690-991c95c89dfd
This commit is contained in:
Sam Johnston 2008-05-22 15:25:21 +00:00
parent 1801447627
commit 84176b9497
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
RemoteAssurancePolicy.html
View file

@ -23,7 +23,7 @@
0. Preliminaries 0. Preliminaries
</h2> </h2>
<p> <p>
This sub-policy extends the Assurance Policy ("AP") by specifying how assurances are to be remotely conducted for members where insufficient assurer(s) are available. A Remote Assurer ("RA") shall be assigned by a board-appointed Remote Assurance Officer ("RAO") to conduct the assurance to the satisfaction of the RAO using two Trusted Third Parties ("TTP"s). This sub-policy extends the Assurance Policy ("AP") by specifying how assurances are to be remotely conducted for members where insufficient appropriate assurer(s) are available. A Remote Assurer ("RA") shall be assigned by a board-appointed Remote Assurance Officer ("RAO") to conduct the assurance to the satisfaction of the RAO using two Trusted Third Parties ("TTP"s).
</p> </p>
<p> <p>
Successful completion of the process shall result in the Assuree achieving the status of Assurer (eg the allocation of sufficient points to reach 100). However this status should not be considered permanent and the Assuree must seek assurance by the usual means as soon as practicable. Successful completion of the process shall result in the Assuree achieving the status of Assurer (eg the allocation of sufficient points to reach 100). However this status should not be considered permanent and the Assuree must seek assurance by the usual means as soon as practicable.
@ -32,7 +32,7 @@
1. Scope 1. Scope
</h2> </h2>
<p> <p>
This sub-policy is restricted to members where insufficient local assurer(s) are available to reach Assurer status by the usual means within a 30 day period. This sub-policy is restricted to members where insufficient appropriate local assurer(s) are available to reach Assurer status by the usual means within a 30 day period.
</p> </p>
<h2> <h2>
2. Roles 2. Roles
@ -68,7 +68,7 @@
</li> </li>
<li>MUST retain the Remote Assurance Form and a copy of the identity documents for at least 60 days and respond to enquiries in a timely fashion <li>MUST retain the Remote Assurance Form and a copy of the identity documents for at least 60 days and respond to enquiries in a timely fashion
</li> </li>
<li>SHOULD have experience with the Remote Assurance Program, unless no experienced local TTPs are available within a 30 day period <li>SHOULD have experience with the Remote Assurance Program, unless none are available within a 30 day period
</li> </li>
<li>SHOULD be recommended to the Assuree by the RA where possible so as to improve security <li>SHOULD be recommended to the Assuree by the RA where possible so as to improve security
</li> </li>
@ -100,7 +100,7 @@
</li> </li>
<li>SHOULD be the most senior Assurer available <li>SHOULD be the most senior Assurer available
</li> </li>
<li>SHOULD have experience with the TTP program, unless no experienced local Assurers are available within a 30 day period <li>SHOULD have experience with the TTP program, unless none are available within a 30 day period
</li> </li>
<li>MAY charge a reasonable fee for the service, provided that fee is disclosed in advance <li>MAY charge a reasonable fee for the service, provided that fee is disclosed in advance
</li> </li>
@ -162,7 +162,7 @@
</li> </li>
<li>RA MUST authenticate the TTP to their satisfaction by:<br /> <li>RA MUST authenticate the TTP to their satisfaction by:<br />
<ol style="list-style-type: lower-roman;"> <ol style="list-style-type: lower-roman;">
<li>searching for their details in an appropriate, official public registry (eg government site, association registry) <li>searching for their details in an appropriate, official public registry (eg government site, association registry, telephone book)
</li> </li>
<li>contacting the TTP using these details to verify their identity <li>contacting the TTP using these details to verify their identity
</li> </li>