cacert/cacert-policies
9
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

tweaks

Browse source 
git-svn-id: http://svn.cacert.org/CAcert/Policies@789 14b1bab8-4ef6-0310-b690-991c95c89dfd
This commit is contained in:
Sam Johnston 2008-04-23 14:22:06 +00:00
parent a303f1a726
commit ccb2b2d020
1 changed files with 10 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
RemoteAssurancePolicy.html
View file

@ -23,7 +23,7 @@
0. Preliminaries 0. Preliminaries
</h2> </h2>
<p> <p>
This CAcert sub-policy extends the Assurance Policy ("AP") by specifying how assurances are to be remotely conducted for members where insufficient assurer(s) are available. A Remote Assurer ("RA") shall be assigned by a board-appointed Remote Assurance Officer ("RAO") to conduct the assurance to their satisfaction using TWO Trusted Third Parties ("TTP"s). This sub-policy extends the Assurance Policy ("AP") by specifying how assurances are to be remotely conducted for members where insufficient assurer(s) are available. A Remote Assurer ("RA") shall be assigned by a board-appointed Remote Assurance Officer ("RAO") to conduct the assurance to their satisfaction using TWO Trusted Third Parties ("TTP"s).
</p> </p>
<p> <p>
Successful completion of the process shall result in the Assuree achieving the status of Assurer (eg the allocation of sufficient points to reach 100). However this status should not be considered permanent and the Assuree must seek assurance by the usual means as soon as practicable. Successful completion of the process shall result in the Assuree achieving the status of Assurer (eg the allocation of sufficient points to reach 100). However this status should not be considered permanent and the Assuree must seek assurance by the usual means as soon as practicable.
@ -66,9 +66,9 @@
</li> </li>
</ol> </ol>
</li> </li>
<li>MUST retain the TTP form(s) for at least 60 days and respond to CAcert enquiries in a timely fashion <li>MUST retain the TTP form(s) for at least 60 days and respond to enquiries in a timely fashion
</li> </li>
<li>SHOULD have experience with the CAcert TTP program, unless no experienced local TTPs are available within a 30 day period <li>SHOULD have experience with the Remote Assurance Program, unless no experienced local TTPs are available within a 30 day period
</li> </li>
<li>SHOULD be recommended to the Assuree by the RA where possible so as to improve security <li>SHOULD be recommended to the Assuree by the RA where possible so as to improve security
</li> </li>
@ -107,14 +107,14 @@
2.4 Assuree 2.4 Assuree
</h3> </h3>
<p> <p>
An Assuree (the subject of an assurance) using the CAcert TTP program: An Assuree (the subject of an assurance) using the Remote Assurance program:
</p> </p>
<ol style="list-style-type: lower-alpha;"> <ol style="list-style-type: lower-alpha;">
<li>MUST agree to be bound the CAcert Community Agreement (CCA), including the Disupute Resolution Policy (DRP) <li>MUST agree to be bound the CAcert Community Agreement (CCA), including the Disupute Resolution Policy (DRP)
</li> </li>
<li>MUST justify to the Assurer as to why it is the standard processes are not appropriate <li>MUST justify to the Assurer as to why it is the standard processes are not appropriate
</li> </li>
<li>MUST provide adequate identification to satisfy the prevailing CAcert Assurance Policy and the TTP <li>MUST provide adequate identification to satisfy the prevailing Assurance Policy and the TTP
</li> </li>
<li>MUST cover the costs of their assurance (if any), including fees imposed by TTPs and Assurers <li>MUST cover the costs of their assurance (if any), including fees imposed by TTPs and Assurers
</li> </li>
@ -142,17 +142,17 @@
</li> </li>
<li>Assuree SHALL have their identity verified by the TTP by:<br /> <li>Assuree SHALL have their identity verified by the TTP by:<br />
<ol style="list-style-type: lower-roman;"> <ol style="list-style-type: lower-roman;">
<li>obtaining and printing two copies of the CAcert TTP form <li>obtaining and printing two copies of the Remote Assurance Form
</li> </li>
<li>taking two copies of any identity documents to be presented to the TTP <li>taking two copies of any identity documents to be presented to the TTP
</li> </li>
<li>meeting with the TTP in person and furnishing <strong>at least</strong> sufficient identification to meet the requirements of the prevailing Assurance Policy <li>meeting with the TTP in person and furnishing <strong>at least</strong> sufficient identification to meet the requirements of the prevailing Assurance Policy
</li> </li>
<li>executing the CAcert TTP form in dupicate, in the presence of the TTP <li>executing the Remote Assurance form in dupicate, in the presence of the TTP
</li> </li>
<li>leaving one TTP form and copies of identity documents with the TTP for at least 60 days <li>leaving a Remote Assurance Form and copies of identity documents with the TTP for at least 60 days
</li> </li>
<li>sending one TTP form and copies of identity documents to the Assurer by mutually agreed medium (eg post or encrypted email) <li>sending a Remote Assurance Form and copies of identity documents to the Assurer by mutually agreed medium (eg post or encrypted email)
</li> </li>
</ol> </ol>
</li> </li>
@ -225,7 +225,7 @@
<li> <li>
<strong>Assurees:</strong><br /> <strong>Assurees:</strong><br />
<ol style="list-style-type: lower-roman;"> <ol style="list-style-type: lower-roman;">
<li>Existing CAcert Assurers (due to lack of demonstrable need) <li>Existing Assurers (due to lack of demonstrable need)
</li> </li>
</ol> </ol>
</li> </li>