Category Archives: Information

General news/information to the CAcert community or about security in general

CAcert assurances at Linux Infotag Augsburg

This year too, there will be enough 35-point assurers at the booth of the LUG Ottobrunn at Linux Infotag in Augsburg (26th march) to get fully assured (100 points). Check for the CAcert badges & logo !

Auch dieses Jahr werden ausreichend 35-Punkte Assurer am Stand der LUG Ottobrunn beim Linux Infotag in Augsburg (26. März) anwesend sein, um voll assured zu werden (100 Punkte). Folgt dem CAcert Logo !

ATE-Munich, 2. April

After Munich’s ATE in 2009 another one is scheduled. This time it is a joint offer from the CAcert community and Munich’s open source meetings. It is also supported by secure-u e.V.
We will host the ATE on afternoon of 2nd April. More details on the wiki.

There are a couple of options to indicate that you are attending:

– Email I will attend ATE-Munich
– Acknowledge the XING event
– Edit the wiki directly

As IanG said: “The ATE or Assurer Training Event is exceptionally recommended for all Assurers, and include parts which contribute directly to our audit. Come and find out how you can also contribute.”

München

~ 30 people have been registered already. Looking forward to seeing you at the ATE.

And the Oscar goes to …

… CAcert4München.

Hmmm, not really, to be honest 😉

It is true that it has been awarded. But it didn’t won the Oscar, not even the „Goldene Kamera“.
CAcert4München was amongst the awarded proposals for the Munich Open Government Day (MOGDy) .

And the award can be viewed at the bottom of this page.

What is the proposal about ?

Well, in a nutshell it suggests that the Munich Government uses CAcert for client and server certificates needed. And they might include CAcert’s root certificates into their own Linux distribution called LiMux.

Note that one can vote for the proposal still. The more people support the proposal the more important it looks to the people running the MOGDy campaign.

How to support ?

Register: Go to the registration page , upper righ hand corner ? Registrieren.

Then on the right hand side fill in:

Benutzername: user name, your choice
E-Mail: your email address
Passwort: choose your own password
Passwort (bestätigen): enter your password a second time

Vote: Go to the proposal page and on the upper left hand side either click on
dafür (aye) or
dagegen (naye)

Of course MOGDy is targeted (but not restricted) to people living in Munich.
So please support the proposal, since it is an advantage for Munich (save costs, create yet more attractiveness in the open source community) and for CAcert (probably one „big shot“ for the inclusion status).

Thanks
Frank

Workaround for Russian Translation of the CAcert Website (bug #900)

Russia Translation of CAcert.org WebsiteWe had received a couple of reports by either irc, emails to support or on mailing lists, that the Russian Translation of our CAcert.org Website has garbled Russian translations. This has been reported as Bug #900.

After several analyzes, tests, discussions, we came to the conclusion, that we need an overall UTF-8 upgrade of the critical system. This has to be started as an individual project. As this project doesn’t effects our great efforts on Audit, the priority is lowered against several other Audit essential projects. So currently, there is no easy and no quick fix possible. So we, or better to say Michael V. A. (one of the bug reporters) worked out an workaround:

the exact steps to reproduce both the problem and the workaround:

1. The Bug
http://CAcert.org [^] / Translations / ???????
( http://www.cacert.org/index.php?id=0&lang=ru_RU )

Now the text is garbled (“Western ISO-8859-1” autodetected).

2. The Workaround
Switching to ISO-8859-5.

In my browser (Firefox 3.6.13) it’s exactly the following:

View / Character Encoding / More Encodings
/ East European / Cyrillic (ISO-8859-5)

Now all Russian text is okay.
The workaround works for me.
Yes, I think this should work for other users, as well.

CAcert at Fosdem 11th, Feb 5th – 6th 2011

FOSDEM, the Free and Open Source Software Developers' European Meeting

CAcert and sidux e.V. will be present at Fosdem 2011, the Free and Open Source Software Developers’ European Meeting, February Sat 5th and Sun 6th 2011

If you want to help on our booth, register yourself on our events wiki page Fosdem 2011 planning

CU at Fosdem ….

ATE-Brisbane

ATE-Brisbane is happening! Francois has scheduled us into Linux Conference Australia’s annual bash in Brisbane‘s QUT Garden Point Campus. We will host an ATE on afternoon of 24th January. More details on the wiki.

I will attend ATE-Brisbane! Registration is essential as you won’t be able to get in.

For those who can’t make the afternoon timeslot, I’ll be available on Sunday evening. Mail as above if you want an additional ATE or just assurances & help.

The ATE or Assurer Training Event is exceptionally recommended for all Assurers, and include parts which contribute directly to our audit. Come and find out how you can also contribute. Please RSVP as above.

Other events in Oz are welcome! Mail us with suggestions (use the RSVP above). Note the board has earmarked funds to get us to Melbourne and Brisbane, and also some travel budget to other NSW locations (Wollongong and Newcastle, but hey, there are other places)! If you can offer us a venue, we’re interested!

CAcert webserver downtime on Wednesday December 29, 2010

We have scheduled to perform a system software upgrade of the CAcert webserver on Wednesday December 29 2010, starting at 10:00 CET. The upgrade will last at most until 13:00 CET, but we are aiming to complete well before that time. During the upgrade, the CAcert webserver will be unavailable for all users, and no certificates can be signed or revoked. All other CAcert servers will remain up and running though (including OCSP and CRL services).

Wytze van der Raay
team leader CAcert ciritical system administrators

Licensing our Documentation under CC-by-sa+DRP

Hi all, and contributors of documentation!

We are now at the point of licensing our documents. As some of you may have noticed, we have now licensed the Policies under Creative Commons – attribution – share alike licence, with our DRP [1]. Or CC-by-sa+DRP for short [2].

The Board is intending to do the same thing with our other documentation: CC-by-sa+DRP.

If you’re fine with this, say YAY TEAM, and read no further 🙂

Some notes on what this means:

  1. In broad terms the chosen licence is like GPL but for documents not source code.
  2. Documents are contributed under CCA 1.3 which includes this broad grant from you to CAcert Inc.:

    1.3 Your Contributions

    You agree to a non-exclusive non-restrictive non-revokable transfer of Licence to CAcert Inc. for your contributions. That is, if you post an idea or comment on a CAcert forum, or email it to other Members, your work can be used freely by the Community for CAcert purposes, including placing under CAcert Inc.’s licences for wider publication.

    You retain authorship rights, and the rights to also transfer non-exclusive rights to other parties. That is, you can still use your ideas and contributions outside the Community.
    ….

  3. At first glance, that clause CCA 1.3 looks quite fierce. There are a couple of reasons for such a complete and blanket transfer.
    1. It has been our experience that people have made contributions, and withheld transfer, preferring instead to control the results by means of copyright rights. This has put the Board, the Policy Group and the critical teams in a difficult position at times. The people making the contributions have often been thinking with all good intentions, but results of those intentions have been at least unpredictable and sometimes very costly.
    2. Secondly, it is possible that people with bad intentions could insert documents of uncertain background, and then stir up trouble later [3]. We do live in a competitive environment, and a competitor could cause this to happen. So the CCA includes a broad grant that addresses that.
    3. Thirdly, it would take an entire team to resolve the copyright mess if we didn’t have a broad grant. We’d have to have people running after every document, every post, every idea. It’s just uneconomic, and most of the contributors would not fill out the forms and return them anyway. We’ve got better things to do without creating work for ourselves following the tired old dreams of some 20th century colonialist music empire for the collection of royalties from poor starving artists.
  4. The grant is broad about what documents belong. Primarily we’d expect that to include the wiki, the SVN, the doco pages on the main website, email / list forums etc. These would all be “forums” under the above text. The point is it’s broad, inclusive. If there is any difficulty about this, then the intention is to use our Arbitration to solve the bits we missed.
  5. The quid pro quo for all of this is that CAcert Inc, now the proud owner of lots of documentation, license it back to the community. That’s today’s job.

So this email is going out to all the team leaders and so forth, from the Board, to ask for your thoughts, comments, desires, responses on the issue. What do you think? More thought required? Or full-steam-ahead? Somewhere in between? [4]

iang, informally for and from Board [5].

[1] There are some technicalities. We are adding to this by resolving all disputes in our own forum. We do this by means of the single licensing line in the document itself which now looks like: CC-by-sa+DRP. The motive for this is that our Arbitration works well across the planet, and is cheaper. It’s the same motivation for Arbitration with anything else, we protect all the members better this way.

[2] Also, we are using the Australian licence, 3.0 version, so the fuller acronym would add -AU-3.0. It is customary to not add those details. The various 3.0 licences are meant to be complementary (documents can work together under different 3.0 licences from different countries.

[3] This has been reported in the IETF groups, mostly with “submarine patents,” as a game between competitors.

[4] If you’ve got this far 🙂 Let me take this moment to conduct a quick survey: who feels more comfortable with the spelling of the word as licence, and who feels more comfortable with license?

For the noun form, the word is /licence/ in Anglo spelling, and /license/ in American spelling. The reason it is confusing is that in Anglo-english, the *verb* form uses S like licensing, licensed not C like licence. The American form then is far simpler, using S all the time, and as expected. The Anglo form is confusing … Note the RDL retained the American form 🙂

Anglo in this context means A/NZ/UK, I’m not sure about countries such as India, Pakistan, Singapore, Honk Kong and other strong users of English. Europe generally adopts British English, but I’d be surprised if they have avoided this confusion! Note that the answer to this question may feed into a wider question…

[5] which means, there is no Board motion as yet. There is board discussion minuted at:
https://wiki.cacert.org/Brain/CAcertInc/Committee/MeetingAgendasAndMinutes/20101003#a2.3

Assurer Training Event Hamburg, Freitag 5.11.2010

Scroll down for English version

[Deutsch]

Es hat sich viel getan im letzten Jahr. Eine ganze Reihe von bisher eher “mündlich überlieferten” Regeln wurden in Policies gegossen. Neue Prozeduren (z.B. die Assurer Challenge) und Verpflichtungen (z.B. in dem CAcert Community Agreement) wurden beschlossen. Die Assurer Training Events wollen versuchen, die ganzen Informationen unter’s Volk zu bringen:

  • Was hast du auf dem CAP Formular hinzuzufügen, wenn du Minderjährige überprüfst ?
  • Was sind die 2 wesentlichen Punkte der CCA die du einem Assuree vermitteln können sollst ?
  • Unter welchen Umständen können z.Bsp. niederländische Rufnamen akzeptiert werden?

Antworten auf diese und weitere Fragen erhälst du bei den Assurer Training Events (ATEs).

Die kommende Veranstaltung in deiner Nähe findet statt am Freitag, den 5. November 2010 ab 19 Uhr:

Attraktor e.V.
Mexikoring 21
22297 Hamburg

Das Veranstaltungs-Team freut sich schon auf Eure Teilnahme.

Details zum Veranstaltungsort und Anfahrthinweise findet Ihr im Wiki: ATE-Hamburg im Wiki

Unverbindliche Anmeldung und Registrierung:
Ich möchte am ATE in Hamburg teilnehmen.

[English]

Much has happened during the past 3 years. The old way of
orally-transmitted procedures has now gone, and our rules have been cast
into formal policies. New procedures (e.g. the Assurer Challenge) and
obligations (e.g. in the CAcert Community Agreement) have been approved.
The Assurer Training Events bring all this to you, the Community:

  • What you have to add onto the CAP form if you assure U18 people ?
  • What are the 2 essential topics regarding CCA you have to present an Assuree ?
  • When you can accept i.e. a Dutch “roepnaam” ?

Answers to these and many other questions are given at the Assurer
Training Events (ATEs).

The nexte ATE takes place on Friday, November 5th, from 7 p.m., at

Attraktor e.V.
Mexicoring 21
22297 Hamburg

The Event-Team is looking forward to your attendance.

Details on Location and Transportation can befound in the corresponding Wiki page.

Informal registration and questions: I will attend the ATE in Hamburg.