Policy-Discussion

["J. Steijlen" <j.steijlen AT gmail.com>]

Okay, I get it now. A very interesting question.
And I'm kicking it over to the CAcert-policy list. Where such issues are debated and decided.

Short answer. At the moment, no.
We do have a program that accepts certificates, TVerify. (see below) But at the moment that program is in flux. Lack of Policy, audit fail, etcetera. (And it's only for one single issuer, but I'm not completely sure on that.)
Given that in Belgium it should be fairly easy to set up a meeting with several assurers. Might I inquire in which corner of Belgium you are located?
There is also a form on our website where you can enter a location (your home town for example, or your workplace) and get a list of assurers in that area.



---- policy list question ----

One method of identification is a personal meeting and showing some sort of ID. AKA an assurance.
(Government issued photo-ID, according to CAcert policies.)
Another method is asking a notary to view your document and sign a document stating that the information detailed in the document does indeed correspond to a government issued photo-ID. (TTP)
Yet another is using a certificate signed by third parties (eg Thawte) which CAcert can rely upon.


We (used to) have enough faith in Thawte to rely upon their certificates, why do we not also have faith in the certificates issued by the same entity (government) that we trust and rely upon to issue photo-IDs?

It does seem to fall within the same, or at least a similar, scope as TVerify.
Germany is also heading this way with their ID cards.
Is this TVerify without Thawte? Is this something which deserves a policy all of it's own?
Do we like it? If yes, do we continue work on TVerify or similar policies?

I think yes.
Policy list, do your worst.



Greetings Joost

2009/10/15 DUCHESNE Cédric <admin AT cedric-duchesne.be>

Dear sir,

 

To be an Assurer (or someone who is fully and physically recognized by other), you suggested to use trusted third parties, like notaries etc.

In Belgium, we’ve already got some personal e-certificates, so my question is : can we use it to be officially recognized by you and get some Assurance Points (e.g. 100) to pass the Assurer challenge ?

And, if yes, what’s the process to send you a confirmation of myself through this e-Document ?

 

Thanks,

 

DUCHESNE Cédric

 

De : J. Steijlen [mailto:j.steijlen AT gmail.com]
Envoyé : jeudi 15 octobre 2009 08:49
À : cacert-support AT lists.cacert.org; admin AT cedric-duchesne.be
Objet : Re: [website form email]: Accreditation by other Certificate Root

 

Could you clarify your question please?

 

I have trouble visualizing what you're trying to accomplish.

That makes it hard to give an answer.

Greetings Joost

2009/10/14 <website-form AT cacert.org>

From: Duchesne
Email: admin AT cedric-duchesne.be
Subject: Accreditation by other Certificate Root

Message:
Hello,

I've read I must contact you about an authentification by another Official Certificate (published by the Federal Government of Belgium through an identity card secured by a PIN code).

Is it agreed by you as authentification system ? What's the process to send you a confirmation ? (e-mail certification is agreed by this eid card)

Thanks for your help.

DUCHESNE Cédric
Belgium