Category Archives: Information

General news/information to the CAcert community or about security in general

CAcert AGM and New Board, Rules changes accepted

On 2011-11-27 CAcert held its Annual General Meeting. Minutes will be published soon on the wiki.

A new board was elected. We are happy to announce the new CAcert board

  • Piers Lauder, AU
  • Dirk Astrath, DE
  • Jeffrey Frederick, US
  • Michael Tänzer, DE
  • Raoul Xavier Boerlage, NL
  • Werner Dworak, DE
  • Tomas Trnka, CZ

During the AGM CAcert’s annual report and the financial report was presented and accepted by the membership. It shows many things happened at CAcert during the last year and is worth reading to get an impression of CAcert’s progress during the last time.

During the AGM, 3 special resolutions were presented, first to bring CAcert Inc rules in compliance with Association Act 2009 and 2 more rules changes, that fixed a minor bug. The rule changes have been accepted in a strong concensus.

A big thank you to all people volunteering and helping to achieve this successful result. CAcert is dependent on many volunteers and is looking forward for your help to achieve such a good result for the coming year.

Changes at CAcert: New Points Counting

We are proud to announce recent changes in the CAcert website. Although there have been quite a few changes in the past, mostly they have happened “behind the scenes”. Today we can announce more visible changes:

1. Change to My Points page
The Point list in the menu under “My Details” -> “My Points” will be enhanced. Main Point is: The Assurance Points received and given will be allocated in a new way. The crucial point was the working total of Assurance Points allocated to the Assuree. Previously, only the beneficial points were displayed, and points allocated in Assurances were rounded down if in excess of 100.

From now on, all allocated points are displayed. The Assuree can still only benefit up to a maximum of 100 Assurance Points. As an Assurer, the member may benefit up to a maximum of 50 Experience Points by assuring other members. The new list will display the calculation much more transparently. Please have a look at the new points listing at https://www.cacert.org/wot.php?id=15

2. Tverify points revoked
Along with this change, all points allocated under the old Tverify program will be revoked in the near future. The Tverify program to transfer points allocated by Thawte Notaries across to CAcert members was stopped sometime ago. Tverify points cannot be verified by CAcert (for example, they cannot be distinguished between the different Notaries), and therefore, these points will be revoked soon. If you are unsure about your level of assurance, we recommend that you seek further assurance from CAcert Assurers.

By performing these measures, we take another step towards a successful audit. Passing the audit is an important building block to be accepted as a CA in the internet browsers.

3. Check your Alert Settings
We would like to advise you of another important fact: In the future, we intend to send you further newsletters with our most important news, every few months. This present newsletter is being sent to all CAcert Community Member in a one-off mailing. For the future, please check your settings online at www.cacert.org under “My Details” -> “My Alert Settings” or at https://www.cacert.org/account.php?id=36 and choose which newsletters you want to receive. In the future, we intend to rely on your settings so as to send our newsletter only to those who wish to receive the specified information.

Best regards,
Alexander Bahlo
Officer for Public Relations
CAcert.org

Further information on the New Points counting:
https://wiki.cacert.org/FAQ/NewPointsCount

Annual General Meeting 2011-11-27

CAcert Inc, the association within the Community, will held the AGM on Sunday 2011-11-27 21:00 UTC. Which makes it evening in Europe, afternoon in the Americas, and tomorrow morning in Australia. The meeting will be held in CAcert’s IRC channel #AGM

The agenda and preperations you’ll find under: AGM 2011-11-27

There are 3 special resolutions on the agenda:

  1. Replace Association Act 1984 Links with Accociation Act 2009 Links within current
    Make CAcert Inc Rules compliant to Accociation Act 2009 rules
  2. Correct Error 13.1
  3. Delete Common Seal

Downtime scheduled for CAcert webserver on Nov 23, 2011

The CAcert main webserver will be unavailable for about one hour on Wednesday November 23, 2011, starting at 10:00 UTC. A database update is scheduled to take place on that day between 10:00 UTC and 11:00 UTC. If you are interested in the technical details, please check https://bugs.cacert.org/view.php?id=976.

We expect that the update will be completed within one hour. During the update the website cannot be accessed, and no certificates can be issued or revoked. Other CAcert services (CRL, OCSP, mailing lists, wiki etc) will remain available as usual.

CAcert at Worldwide Software Freedom Day (SFD) Sat Sept 17th

Software Freedom Day LogoSaturday, 17th 2011, the worldwide Software Freedom Day or “Software Freedom International” (SFI) has been announced. In several cities around the world activities will be presented.

CAcert has representives at least in Cologne and Hamburg (both Germany).

The Hamburg event is held by Lug Balista.
The event at Cologne is at Coworking Cologne. Alexander Bahlo from CAcert will give a presentation “Signieren von Dokumenten in Open­Office.org/Libre­Office”

Event Details Cologne
Event Details Hamburg

FrOSCon 2011 in St. Augustin 20./21. August 2011

For the English version see below.

Auch in diesem Jahr wird CAcert wieder auf der FrOSCon am 20. und 21. August in St. Augustin mit einem Stand vertreten sein.
Des Weiteren wird es in Zusammenarbeit mit OpenOffice einen Vortrag zum Thema “Signieren von OpenOffice-Dokumenten” geben.
Sprecht uns auf dem Stand an, um zu erfahren, welche Aktivitäten zur Zeit bei CAcert durchgeführt und geplant sind.
Mehr unter http://wiki.cacert.org/events/FrOSCon2011

English
CAcert will be present again with a booth on the FrOSCon in St. Augustin 20th/21st August.
Further more there will be a speech about “Signing of OpenOffice documents” together with OenOffice.
Feel free to come along and ask us what CAcert is doing at the moment and what are the plans for the near future. More see http://wiki.cacert.org/events/FrOSCon2011

Certificates for weak keys revoked

If you received email today stating that one or more of your certificates was revoked than this action was initiated by CAcert. See the announcement on the blog.

For more background information see the Arbitration page and Hanno Böck’s blog post.

A short summary, some certificates were found for private keys which could easily be cracked because of one of the following reasons:

  • Their modulus size is small (y 1024 bits) and therefore quickly be “brute forced” with usual desktop computers.
  • They use an small exponent which is vulnerable to well known cryptographic attacks
  • They used a key generated by a buggy debian system (see Debian Vulnerability).

The CAcert web page has now been modified not to accept such weak keys for certificates in the future.

We wish to thank Hanno Böck for notifying us of this problem and giving us enough time to fix it before publishing it.