Category Archives: Information

General news/information to the CAcert community or about security in general

SHA1 getting insecure : WinXP-SP2, Debian Stable, FreeBSD 6.1, OSX 10.4 affected!

SHA-1 has just been broken a bit more: http://www.heise-security.co.uk/news/77244
CAcert is aggressively moving to SHA-2 as we speak.

Microsoft will support SHA-2 only in Windows Vista according to our sources.
Debian Stable, FreeBSD and OSX don´t provide SHA-2 in their current versions.
SuSE, Knoppix, FC5, Ubuntu, Mandriva, … all support SHA-2 already.
Read more details about SHA-2 support of various applications and distributions on http://wiki.cacert.org/wiki/HashInterop

Please contact your vendor to tell them that you need SHA-2 support!

http://en.wikipedia.org/wiki/SHA

CAcert on come2Linux, Essen (Germany)

The Linuxtage in Essen take place in the glass pavilion of the university of Duisburg-Essen on September 9th and 10th, 2006.
Saturday 10:00 — 18:00 clock and Sunday 10:00 — 4:00 p.m..
The glass pavilion (the red building) is between the building entrances R11 and R12 (on the site plan of the main campus Essen on the right edge). At the event there will be several Community stands, a topic park and papers as well as workshops.

CAcert also wants to take Place at this event and need help from Assurers and Users around Essen. Please see http://wiki.cacert.org/wiki/come2linux for more information!

CAcert Brunch Berlin 2006-08-13

On Sunday August 13th there will be a CAcert certification event
in Berlin, Germany.  It will take place at the cafe/restaurant
“Yildiz” next to the subway station “Hallesches Tor”
from 11am to (at least) 2pm.  Certifications are free of cost
(as usual :-), and the brunch costs 6euros – flat rate.

Please do not forget to bring two items of identification
(eg an id-card, a driver’s license, or a passport).
if you intend to come then please “register” yourself on
the wiki page http://wiki.freitagsrunde.org/CAcert/Brunch
or simply send a mail to cacert@freitagsrunde.org – thanks!

Assurers in Coventry(UK) needed

The Coventry Linux User Group is searching for Assurers to help them grow CAcert in the UK. If you ever wanted to visit Coventry, or try to spread CAcert in a new area, here is your chance to do both at once! If you are interested, please contact support at CAcert dot org, we will get you in touch

TTP in Germany no longer available

The CAcert Trusted Third Party (TTP) Programme is no longer available in Germany. Because of so many Assurers here there is no need for this programme anymore. Because of this also the Superassurer (SA) is no longer available in Germany. Other countries take no effect of this.

Linuxinfotag Pforzheim – 15.Juli 2006

Seit 2004 veranstaltet die Pforzheimer Linux User Group jedes Jahr den Linux-Info-Tag. Dieser findet auch am 15. Juli 2006 wieder an der Hochschule Pforzheim statt.

Das Konzept der Veranstaltung vereint sowohl ein Vortragsprogramm als auch eine Linux Installationsparty, Workshops und eine Ausstellung von Freien Software-Projekten.

CAcert  wird auch wie im Vergangenen jahr mit einem Stand und einem Vortrag zum Thema E-mail Zertifikate und deren praktische Anwendung vertreten sein.

Erwartet werden in diesem Jahr ca. 1000 Besucher. Termin: Samstag, 15. Juli 2006 10 – 20 Uhr Ort: T1 – Technikgebäude der HS Pforzheim Tiefenbronner Strasse 66, Pforzheim

Link: http://infotage.pf-lug.de/2006/

Wer Assurer ist (oder werden möchte) und gerne helfen möchte kann auch im CAcert-Wiki unter http://wiki.cacert.org/wiki/LinuxInfotag-Pforzheim vorbeischauen und sich eintragen.

CAcert on the FrOSCon 2006

Der Fachbereich Informatik der Fachhochschule Bonn-Rhein-Sieg veranstaltet mit Hilfe der Fachschaft Informatik, der LUUSA und des FrOSCon e.V. 2006 erstmals eine Konferenz rund um Themen der freien Software.

CAcert wird dort einen Stand haben an dem man sich assuren lassen kann und vorraussichtlich auch einen Vortrag am Sonntag über die praktische Verwendung von CAcert Zertifikaten.

Achtung: Es werden noch Assurer für den Stand gesucht. Interressierte bitte unter http://wiki.cacert.org/wiki/FrosCon eintragen.


The Fachhochschule Bonn-Rhein-Sieg organised the Froscon 2006, a conference about free Software.

CAcert has its own booth there and also on sunday a lecture about using CAcert Certificates.

more Infos (in german): http://www.froscon.de/wiki/FrOSCon

over 6000 Assurers

Duane postet at 2005-05-06:

It’s taken 2 years, 2 months, and 6 days but finally we have reached 2000 assurers.

Today, another year later we have reached over 6000 Assurers, over 53,000 valid Certificates and so it goes on.

The 13th Assurer

Or why we start demanding the 26 eyes principle …

The assumed quality of human manual identity verification is 99%, giving an error rate of 1%. That was the main reason behind the 4 eyes principle rule at CAcert, trying to have at least 2 assurers verify the identity of a person. Statistically, this should reduce the error rate to 1:10,000 . In practice, we had a lot of cases already, where the second assurer noticed small problems, that the first assurer oversaw, which resulted in correcting the error. (Most errors are numerical errors with the birthday, or smaller mistakes in the name). So the system seemed to work fine that way. Until an assurer noticed a couple of days ago, that there are 2 small errors in the name in an account, and that there were already 12 other assurers that assured the person, without noticing it.
Statistically, the possibility for 12 assurers not noticing it should be 1:1,000,000,000,000,000,000,000,000 (according to the statistical model) 😉
Thanks to the 13th Assurer for noticing it!
Your CAcert Quality Assurance Department

Is there a Moore’s Law for Certificates?

The issue of statistics came up again today (as it does from time to time), currently CAcert is experiencing linear growth rates both in the number of certificates issued each month and the numbers of new signups. Assurances tend to be a bit spikey depending how many conferences attended.

In any case, the number of certificates issued has more then doubled in the past 10 months (about May last year is the half way point) so one must wonder where things are headed if the same trend continues.

Some quick stats for people, about the begining of this month we issued our 100,000th certificate, and about the same time we had our 50,000th signup, and by this time next year we could easily have more then double both those numbers.