CAcert

From What The Wiki?!

Contents

[edit]

BIG THANK YOU

The CACert assurance party saturday was a big succes. Lot's of people came to Tent 4 to get assured. And lots of assurers turned up at the scheduled event. It started right after the last presentation in Tent 4, then we spent 2 full hours of assuring people, then we got thrown out of the tent, because at 8pm the next scheduled presentation would want to begin. I personally talked to some people that came from distant places, like Finland and Spain and the UK.

All weekend people came turning up at our tent to get assured. I think we made a step forward again.

[edit]

What is CAcert and What can I do with the CAcert account

  • CAcert ist building a Certificate Authority (CA) based on the Web of Trust principle and tries to get their Root Cert in commonly used browsers. CAcert is a Non-Profit Certificate Authority (an association based in Sidney Australia); an alternative to the commercial CAs where you can obtain free digital X.509 certificates for client (e-mail) and server (ssl,https) applications.
  • What can you do with your certificate?:
    • Client certificates: you can sign and encrypt your emails, you can identify yourself in a https session.
    • Server certificates: you can secure your server (SSL based) for web, for email transport, etc.
    • Security devices: you can put your certificate on a special securtity device, a smart card or USB security token/stick.
  • CAcert works with a trust point system representing your level of trust in the WoT. The trust point system:
    • 0-49: You are considered not enough 'assured' (not trusted enough) by the system to be able to have your name (Common Name) on a certificate. Such a certificate is valid six months only.
    • 50-99: You can have your name on your certificate, and it is valid for two years. You can add extra email addresses on the cert. You can renew your certificate. And you can obtain as many client certificates as you want, Free!
    • 100-150: You are an Assurer by yourself and can assure others. You can help to widen the Web of Trust. The more assurances you do the more experience you have with Assureances and so the more trust points you can give to an Assurancee (you start with 10 points and can reach the max of 35 points to give away after a while). With each Assurance you obtain 2 trust points you add 2 points to your own amount of trust points.
  • The CAcert account and CAcert registration:
    You have to register with http://www.cacert.org first. In this way you make yourself known to the system. Make sure you do not forget your password and the five questions/answers for password revocation. The account name is your email address. This email address will be used to poll you back. You need the account to obtain new certificates signed by CAcert and change/add your email address.
[edit]

CAcert Assurance during WTH

You can get ID assurances (identifications) for your CAcert certificate right on WTH! There are many CAcert at the WTH. So you should be able to assure yourself and collect enough trust points to be able to have your name stated on your certificate and even to do Assurances already at the WTH by yourself.

[edit]

Prerequisites to get assured

  1. Create a CAcert account at https://www.cacert.org if you don't have one.
  2. Bring a couple of printed WoT forms with you. You need a completed form for each assurement you do.
  3. Print the Wot forms at home or find a printer at WTH, it comes prefilled with your name after you signed up, you will find this in the web of trust area of https://www.cacert.org after you logged in.
  4. You need multiple copies of the form in order to be assured by multiple assurers, and thus gain a sufficient number of trust points. There will be some blank forms available for people who forgot to do so. However our supplies will be limited.
  5. At least one (1) official ID with your picture on it (passport, driver license, governmental identity card) is required to do an assurance. It is much better to present two (2) pieces of picture IDs (most Assurers will give more points).
  6. You can find more information on the CAcert FAQ Wiki: http://wiki.cacert.org/wiki/FAQ_2fAssuranceByCAP

TIP : Make sure your Assurer is able to read your email address on the complete Assurer Form. If there is any mistake in reading the email address, the Assurer is not able to complete his part of the assurance process with CAcert. And he will not be able to find you you later in order to correct this! Tip: write the email address of the Assurer down yourself as well, just in case.

TIP 2 : Use the automated prefilled printed form on https://www.cacert.org

[edit]

Assuring Party/Event (it is like PGP keysigning)

  • It does make sense to arrange a meeting with all the assurers. This eases the way to do as much as possible assurances in a short timeframe without the need of running around and looking for an Assurer. Plus: This will really create a Web of Trust. 
Day  	3 	Saturday 30.07.2005
Location 	Tent 4 (650 p)
Start Time 	18:00 h - 20:00 h

Even if you miss the meeting, you can always try to call some assurers and make arrangements though.

[edit]

Assurers at WTH

Missed the signing party and need some assurers to sign ?! Sunday from 3pm till 5pm in big green army tent on A4, bring valid ID (preferably 2)

There are a lot of CAcert assures at WTH to assure others. And with you there will be more. The assurance or identification process is quite similar to PGP key signing.

Assurer mailing list at https://gramelspacher.ch/cgi-bin/mailman/listinfo/whatthehack-cacert to coordinate assurers. Please place yourself in the table below and subscribe to the mailinglist. List is subscribers only and subscription be aprooved by list admin.

Name contact (please subscribe at ML) CAcert points user can assign EventPhone # other WTH coords
DSmarty dsmarty at dsmarty dot com 35 2318 A4 Biggest Army Tent
edward edward at stempel dot eu dot org 35 3004 A4 Biggest Army Tent
sfxdana 20 A4 Biggest Army Tent
muphry 15 A4 Biggest Army Tent
number3 number3.nl at gmail dot com SA (please get assured by others first) 3003 A4 Biggest Army Tent
KrN krn@krn.dk 35 N/A located in the BSD Village
weew benny@0p.dk 35 N/A located in the BSD Village
gramels SA (please get assured by others first) 5001 find me in the Wireless Village
cefalon located in the CCC Village
curry 35 2879 located at the CERT or Hamradio
fh 35 4444
wraay wytze at nlnet dot nl 35 6926 TBD
Thali jancfk [at] web [dot] de SA (please get assured by others first) 5265 located in the Wireless Village
sn xmpp:L o r p h o s@jabber.fsinf.de 35 4231 at the AerialPhotography village
FooBar maniac.nl [at] gmail [dot] com 35 located in the Snow Tent
SQUelcher squ nahe tent dot austria 35 2300/2305 CERT /// Hamradio
GigaWalt walter+wth [at] belgers [dot] com 35 GIGA (4442) FHQ
flok folkert@vanheusden.com 20 PGP
morgana email 35
Sebastian mail 15 6463
Mendel Mobach DECT,IRC,GSM 30 /DECT/NULL w00tst0ck
Juerd find a way 10 2356
nobody_su nobody_su "ät" chaostreff "döt" (c.confederation h.elvetic) 35 4161 Hamradio /// Swiss_Village
PoCSascha 35 2001 located at the PoC / eventphone Tent
Jtb mailto:wth-cacert@jensthebrain.de 35 5820 w00tst0ck
ScottyTM Mail,Jabber 35 3366 POC/Chaos Village
Hamster mail 20 3264 w00tst0ck
DreckSoft DECT, Mail 10 6389 w00tst0ck
Mario E-Mail (cacert-wth@l4w.info) 35 N/A w00tst0ck
Jeroen Dekkers Mail,IRC,GSM 10
Thomas Kaschwig mailto: wth (AT) kaschwig (DOT) net 35
Phons Bloemen mailto: phons (AT) planet (DOT) nl 10
Levente Farkas cacert at lfarkas dot org SA (please get assured by others first) Location unknown
Sum (exluding SAs) 545
Quux unicorn [at] blackhats [dot] org 35 3997
lmamane lmamane-cacert.wth.2005 [at] conuropsis [dot] org 35 2436
Petenewsdeck peter.bassill [at] starliteassociates [dot] org 10 4851 or Pete
toidinamai Mail/XMPP: frank [at] benkstein [dot] net 35 4727 ChaosVillage <<</>>
François Kooman fkooman [at] tuxed [dot] net 15 5959
[edit]

Costs to get assured

According to the CAcert rules, fees might apply: 

*Fees*
You may charge a fee for your expenses if the applicant has been
advised of the amount prior to the meeting.

Therefore be aware of the fact that some assurers might request you to deliver some Jolt, Club-Mate or Frites Spezial in order to assure YOU.

[edit]

Super Assurers

  • Thali is a SuperAssurer for WhatTheHack. Will bring 100 blank WoT forms.
  • number3 is a SuperAssurer for WhatTheHack. Will bring some 200 blank WoT forms (some where already used during the event)
  • gramels is a SuperAssurer for WhatTheHack.
  • lfarkas is a SuperAssurer for WhatTheHack.

So people from areas with low numbers of CAcert Assurers can get immediatly more trust points to become assurers themselves when they go home. Yay :)

[edit]

T-shirts, buttons and small stickers to identify CAcert assurers

Just a weird idea, but it might be fun to have tents/ campers occupied with CAcert assurers and of course the persons itself somehow tagged:

  • CAcer t-shirt
  • sticker to put on tent
  • poster/ printout to put on tent (I had some time on my hands this morning and printed out ~50 DIN A4 signs "CACert Assurer". fenkt)

Logos at https://www.cacert.org/logos.php

Anybody any ideas how to get this stuff?

Have a look at http://wiki.cacert.org/wiki/t-shirts
[edit]

How-to make stickers

There is an easy way to make stickers, try this:

  1. make a A4 with logo's in mirror image (use any photoediting tool)
  2. print the A4 to a transparent in color (use a laserprinter)
  3. go and buy a two sided sticky transparant paper (any hobby store should have this)
  4. put it on the transparant, and cut it into pieces
  5. voila, you've got instant stickers

You could make A4 stickers, or, small logo stickers (for on your t-shirt).

[edit]

Participants (which are not yet assurers)

Please add yourself to the list, try to add some contact info (e.g mail, link to user page...):


Name Contact Notes
Aldert Hazenberg DECT: 7000 Got account at CAcert.org and printed personalized WOT form 5 times.
M10 DECT: 4210 Just created myself a certificate and some WoT forms
DWizzy DECT: "GEEK", infopoint Time for accreditation!
Michael Kiesel DECT: 2469 Got account at www.CAcert.org, will bring WoT forms
Peter Bassill DECT: 4851 Got an account, will being WoT forms. No assurers within 100 miles of my home :(
bloxx see my Userpage Just got an account and will bring WoT forms
Antti Vähä-Sipilä DECT: 2684, also see Userpage Will bring WoT forms
Miguel van de Laar DECT: 4275, also see Userpage Created an account and will print some WoT forms (and hopefully not forget them)
Xflame DECT: , GSM, E-mail, MSN User Page
Jorgen Rosink See User Page Will bring WoT forms with me...
Knirps DECT:6233 , ICQ: 85659257 Field A4 Thanks on JR who brings me WoT forms :)
[edit]

Links

[edit]

See Also

People that brought a CAcert assurer also brought PGP Keysigning, Thawte WOT, AA-batteries, towel, Passport

Retrieved from "http://wiki.whatthehack.org/index.php/CAcert"