An introduction to CAcert, a community-based root CA. Includes detailed instruction on actual assurance procedure and a guide on how to run an assurance event.
4. Assurer
a
1.
b
2. CAP(CAcert Assurance Program) Form
c
3.
4. CCA(CAcert Community Agreement)
a /
b https://secure.cacert.org/cap.php
c
Member
1. CAcert
2.
a
3. CAP Form OK
a https://secure.cacert.org/cap.php -
CAcert
GPG
1. Assurer CCA
Assurer CAcert
a CAcert Assurer
b 1000EUR 2010/12
10
c COD - CAcert Official Document
2. Member
3. Assurer Member CAP Form
4. Assurer
a CCA
b
c cacert.org
d
e
f
5.
a
b CAcert
4
5. dispute *5 Assurer
c CAP Form
d
e PhD
6.
7. CAP Form
Assurer
Assurer CAP Form
1. CAP Form
2. cacert.org CAP Form
3. CAP Form ←←←
mOm
JK
support@cacert.org
1.4
GPG
CAcert
CAP Form Assurer
*6
support@cacert.org
1.5 CAcert
CAcert
*5
*6 CAP Form
5
6. 1. Event Office (http://wiki.cacert.org/Officers)
2. CAcert EventOffier
3. *7
4. Assurer Assurer
5.
6.
7.
8. EventOfficer Event Office
CAcert
1.5.1
CAcert Event Office
Event Organiser 1 Event Office
Experienced Assurer 3+
Assurer 2+ EA CAP Form EA
2+
2 CAcert
1+
1+
1+
0+
PC 1+ Knoppix
1 CAP Form
10+
1
3 CAcert
*7
6
7. Assurer 1
CAP Form 1p, 30+ Assurer
CAP Form 1p, 20+ Assurer
CCA (4p) 50+ Assurance
CCA ( 1
Assurance Policy (8p) 1+
Assurance Handbook (29p) 1+
Root Distribution License (1p) 1
Dispute Resolution Policy (6p) 1
Practice On Names (4p) 1+ Assurer
Practice On ID Checking (4p) 1+ Assurer
PoJAM (4p) 1
CPS(28p) 1
0+ CAcert Office IR
4 CAcert
CCA(CAcert Community Agreement)
1.5.2
1. CAcert 3-5 *8 CAP
Form
2. Assurer Member( ) Member
3. Assurer Experience Point Assurance
*8 Assurer
7
10. 3 CAcert
COD[0-9]+ PoP/CCS/CCA/PP/DRL/...
DRP( )/CCS( )/CCA /Handbook
CAcert Inc.
4 CAcert REF: http://wiki.cacert.org/Officers
CAcert Wiki
10
11. support@cacert.org
ML
1.7
CAcert
*9 Assurer CAcert
CAcert
1.8
CAcert
1. Using Secure DNS to Associate Certificates with Domain Names For TLS
https://datatracker.ietf.org/doc/draft-ietf-dane-protocol/
2. - DNS - KIDNS (Keys in DNS) -
http://dnsops.jp/bof/20101125/201011-DNSOPS-KIDNSv5.pdf
CERT/TLSA
SSH/PGP
*10 CA
10 DNSSEC
*9 CAcert Inc.
*10 GnuPG
11