From bf798d293390499075b0039b269dc8fe247ef18f Mon Sep 17 00:00:00 2001 From: Teus Hagen Date: Wed, 9 Jul 2008 10:49:24 +0000 Subject: [PATCH] Added 50/100 assurance points minimum 2/3 assurances needed again. Commented out what goes in cert impl policy and ass. handbook. Added chapter numbering. git-svn-id: http://svn.cacert.org/CAcert/Policies@877 14b1bab8-4ef6-0310-b690-991c95c89dfd --- AssurancePolicy.html | 182 +++++++++++++++++++++---------------------- 1 file changed, 88 insertions(+), 94 deletions(-) diff --git a/AssurancePolicy.html b/AssurancePolicy.html index 14c7e7c..acdfe87 100644 --- a/AssurancePolicy.html +++ b/AssurancePolicy.html @@ -4,7 +4,7 @@ - + @@ -20,9 +20,7 @@ DD { color: #000000 } H3 { color: #000000 } TH P { color: #000000 } --> - - - +

Assurance Policy for CAcert Community Members

CAcert Policy Status @@ -36,25 +34,25 @@ Next status: DRAFT June 2008

0. Preamble

Definitions of terms:

-
Member
+
Member
A Member is an individual who has agreed to the CAcert Community Agreement (CCA) and has created successfully a CAcert login account on the CAcert web site.
-
Assurance
+
Assurance
Assurance is the process by which a Member of CAcert Community (Assurer) identifies an individual (Assuree).
Prospective Member
An individual who has been assured in an Assurance process, but has not yet created successfully a CAcert login account.
-
Name
+
Name
A Name is the full name of an individual, with all components of that name.
(Title(s), first name(s), family name(s), name extensions, abbreviation of name(s), etc.
The Name is technically spoken a string exactly taken e.g. from a governmental issued photo ID.)
-
Secondary Distinguishing Feature +
Secondary Distinguishing Feature (DoB)
A Name for an individual is discriminated from similar full names by a secondary distinguished feature, as recorded on the @@ -65,7 +63,7 @@ on-line CAcert (web) account.
The CAcert Web of Trust

At each Assurance one allocates a number of Assurance Points, applied to the assured Member. By combining the Assurances, and the -Assurance Points, CAcert constructs a global Web-of-Trust +Assurance Points, CAcert constructs a global Web-of-Trust or "WoT".

CAcert explicitly chooses to meet its various goals by @@ -89,7 +87,7 @@ experience and circumstances. It is also more readable.

and CAcert Policy Statement (CPS).

1. Assurance Purpose

-

The purpose of Assurance is to add confidence +

The purpose of Assurance is to add confidence in the Assurance Statement made by the CAcert Community of a Member.

With sufficient assurances, a Member may: (a) issue certificates @@ -128,9 +126,9 @@ by the Assurance Points.

Relying Party Statement

The primary goal of the Assurance Statement is for the express -purpose of certificates to meet the needs of the Relying +purpose of certificates to meet the needs of the Relying Party -Statement, which latter is found in the Certification +Statement, which latter is found in the Certification Practice Statement (CPS).

@@ -138,7 +136,7 @@ Statement (CPS may be incorporated, e.g. Name. Other parts may be implied, e.g. Membership, exact account and status. They all are part of the -Relying Party Statement. In short, this means that +Relying Party Statement. In short, this means that other Members of the Community may rely on the information verified by Assurance and found in the certificate.

@@ -149,7 +147,7 @@ nature of Assurance, the number of Assurance Points, and other policies and processes should be understood as limitations on any reliance.

2. The Member

-

The Name in the CAcert login account

+

2.1 The Name in the CAcert login account

At least one individual Name is recorded in the CAcert login account. The Name is recorded as a string of characters, @@ -165,7 +163,7 @@ the applicable level of 50 Assurance Point is defined as an Assured Name. An Assured Name can be used in a certificate issued by CAcert. A Member with at least one Assured Name has reached the Assured Member status.

-

Multiple Names and variations

+

2.2. Multiple Names and variations

A Member may have multiple Names or multiple variations of a Name. For example, married name, variations of initials of first or middle @@ -174,45 +172,41 @@ variations and transliterations of characters in a name.

The login account may record multiple Names. Each of the Assured Names can be selected to be used in a certificate issued by CAcert.

-

FOLLOWING GOES TO ASSURER HANDBOOK

-

Comparison of names

-

Transliteration + +

2.3. Status and Capabilities

A Member has the following capabilities derived from Assurance:

@@ -450,7 +444,7 @@ Community.

4. The Assurance

-

The Assurance Process

+

4.1. The Assurance Process

The Assurer conducts the process of Assurance with each Member.

The process consists of:

@@ -484,7 +478,7 @@ Assuree (Mutual Assurance);

forms by Assurer.

-

Mutual Assurance

+

4.2. Mutual Assurance

Mutual Assurance follows the principle of reciprocity. This means that the Assurance may be two-way, and that each member participating @@ -497,21 +491,21 @@ procedure and process, and is responsible for the results.

the Assurer, and reduces any sense of power. It is also an important aid to the assurance training for future Assurers.

-

Evidence of Assurer status

+

4.3. Evidence of Assurer status

On the question of providing evidence that one is an Assurer, CAcert Policy Statement (CPS) -says: "The level at which each Member is Assured is public +says: "The level at which each Member is Assured is public data. The number of Assurance Points for each Member is not -published..".

-

Assurance Points

+published..".

+

4.4. Assurance Points

The Assurance applies Assurance Points to each Member which measure the increase of confidence in the Statement (above). Assurance Points should not be interpreted for any other purpose. -Note that, even though they are sometimes referred to as Web-of-Trust -(Assurance) Points, or Trust Points, the meaning +Note that, even though they are sometimes referred to as Web-of-Trust +(Assurance) Points, or Trust Points, the meaning of the word 'Trust' is not well defined.

-

Assurance Points Allocation
+

Assurance Points Allocation
An Assurer can allocate a number of Assurance Points to the Member according to the Assurer's experience (Experience Point system, see below). The allocation of @@ -534,11 +528,11 @@ information presented:

Any lesser confidence should result in less Assurance Points for a Name. If the Assurer has no confidence in the information presented, -then zero Assurance Points may be allocated by +then zero Assurance Points may be allocated by the Assurer. For example, this may happen if the identity documents are totally -unfamiliar to the Assurer. The number of Assurance Points from zero -to maximum is guided by the Assurance Handbook +unfamiliar to the Assurer. The number of Assurance Points from zero +to maximum is guided by the Assurance Handbook and the judgement of the Assurer.

Multiple Names should be allocated separately in a single @@ -548,23 +542,23 @@ reciprocal process a maximum of 2 Assurance Points, according to his judgement. The Assurer should strive to have the Member allocate according to the Member's judgement, and stay on the cautious side a maximum of Assurance Points per Name; a (new) Member new to the -assurance process should allocate zero Assurance +assurance process should allocate zero Assurance Points until they get some confidence in what is happening.

-

To reach 50 Assurance Points for a Name the -Member must +

To reach 50 Assurance Points for a Name the Member must have had at least two assurances on that Name: the Assured Member has -at least one Name assured, the Assured Name. To reach 100 Assurance +at least one Name assured, the Assured Name.

+

To reach 100 Assurance Points, at least one Name of the Assured Member must have been -assured at least three times.

-

The maximum number of +assured at least three times.

+

The maximum number of Assurance Points, which can be allocated for a Name assurance under this policy and subsidiary policies is 50 Assurance Points.

If there is negative confidence the Assurer should consider filing a dispute.

-

Experience Points

+

4.5. Experience Points

The maximum number of Assurance Points that may be awarded by an Assurer is determined by the Experience Points of the Assurer.

@@ -574,10 +568,10 @@ Assurer is determined by the Experience Points of the Assurer.

@@ -646,7 +640,7 @@ permanently to an Assurer by CAcert Inc.'s Committee (board), on recommendation from the Assurance Officer.

Experience Points are not to be confused with Assurance Points.

-

CAcert Assurance Programme (CAP) form

+

4.6. CAcert Assurance Programme (CAP) form

The CAcert Assurance Programme (CAP) form requests the following details of each Member or Prospective Member:

@@ -746,13 +740,13 @@ processes. Each must be covered by an approved Subsidiary Policy Subsidiary Policies specify any additional tests of knowledge required and variations to process and documentation, within the general standard stated here.

-

Standard

+

6.1. Standard

Each Subsidiary Policy must augment and improve the general standards in this Assurance Policy. It is the responsibility of each Subsidiary Policy to describe how it maintains and improves the specific and overall goals. It must describe exceptions and potential areas of risk.

-

High Risk Applications

+

6.2. High Risk Applications

In addition to the Assurance or Experience Points ratings set here in and in other policies, Assurance Officer or policies can

-

Assurer's Experience Points

+

Assurer's Experience Points

 -

Allocatable Assurance Points

+

Allocatable Assurance Points