Category Archives: News

News Relating to CAcert

Passez bientôt le test des accréditeurs en français

Français ¦ Deutsch ¦ English

CAcert va de l’avant! Vous avez au moins 100 points de confiance et vous auriez aimé devenir un accréditeur depuis longtemps? Malheureusement, votre anglais n’est pas si bon que ça, vous aimeriez passer le test d’accréditeur (CATS) en français? Réjouissez-vous avec nous: des volontaires de Belgique, de Suisse et de France ont localisé le système de test et il est maintenant disponible en français.

Maintenant, ils travaillent d’arrache-pied pour traduire également les questions du test. Nous sommes confiants que le CATS francophone sera disponible au début de 2019 ou au printemps. Motivez nos bénévoles avec un don généreux pour couvrir les frais de fonctionnement des serveurs.

Possibilités
Virement bancaire en Euro:
secure-u e.V. Banque: Hamburger Volksbank e.G. / IBAN: DE50 2019 0003 0003 0008 5478 07 BIC: GENODEF1HH2 (“pour CAcert”) (l’association secure-u est notre partenaire local en Union Européenne)
Virement bancaire en Australie en AU$:
Compte bancaire Westpac pour AU$: Nom du compte : CAcert Inc. / SWIFT : WPACAU2S / N° de compte : 180264
Paypal:
Soutenez CAcert avec 50$ maintenant avec Paypal
ou faites un don Paypal unique du montant que vous désirez pour nous aider.

DEUTSCH: CAcert-Assurer-Test (CATS) bald auf Französisch

Bei CAcert geht es vorwärts! Während wir Deutschsprachigen den CATS schon seit Jahren auf Deutsch ablegen können, stehen unsere westlichen Nachbarn immer noch vor einer hohen Sprachbarriere. Sie haben mindestens 100 Vertrauenspunkte und wären schon lange gerne Assurer geworden. Leider sind Ihre Englischkenntnisse nicht so gut; sie möchten die Assurer-Prüfung gerne in der Sprache Molières ablegen. Das wird schon bald möglich sein: Freiwillige aus Belgien, der Schweiz und Frankreich haben das Testsystem lokalisiert und es steht ab sofort auch auf Französisch zur Verfügung.

Nun arbeiten sie mit Hochdruck daran, auch die Testfragen zu übersetzen. Wir sind zuversichtlich, dass die französischsprachige Assurer-Prüfung Anfangs 2019 oder im Frühling zur Verfügung steht. Motivieren Sie unsere Freiwilligen mit einer grosszügigen Spende zur Deckung der Betriebskosten der Server.

ENGLISH: CAcert-Assurer-Test (CATS) will be available also in French

CAcert is moving forward! We have a lot of members in Belgium, France and Western Switzerland. They have at least 100 assurance points and would have liked to become an Assurer a long time ago. Unfortunately, their English is not so good; they would like to take the Assurer exam in Molière’s language. There are good news: volunteers from Belgium, Switzerland and France have localised the test system and it is now available in French.

Now they are working hard to translate the test questions as well. We are confident that the French CATS will be available in early 2019 or spring. Motivate our volunteers with a generous donation to cover the running costs of the servers.

Kryptographie-Adventskalender für Kinder und Jugendliche

Leave a reply

Hilfe: Die Spione wollen die Weihnachtsgeschenke klauen! Als weltweit grösster Anbieter freier Zertifikate unterstützt CAcert den Kryptographie-Adventskalender für Kinder und Jugendliche Krypto im Advent.

Mit Hilfe Ihrer Kinder, Enkel, Neffen und Nichten versuchen die beiden Agenten Krypto und Kryptina die Spione abzuwehren. Dabei setzen sie das gesamte Arsenal an Ent- und Verschlüsselungsmethoden ein, die zur Verfügung stehen. Ihre Kinder basteln die nötigen Materialien und entschlüsseln die Geheimbotschaften, um die Spione zu entlarven. Je nach Alter (bis 6. Schuljahr oder ab 6. Schuljahr) ist der Schwierigkeitsgrad unterschiedlich. Die beiden erfahrenen Agenten Krypto und Kryptina unterstützen ihre Helfer mit einer täglichen Videobotschaft.

Einschreiben ab sofort unter http://www.krypto-im-advent.de Der Adventskalender ist eine Initiative der Pädagogischen Hochschule Karlsruhe. Sämtliche Daten werden im neuen Jahr wieder gelöscht.

Welcome to Sydney

Leave a reply

We wish a warm welcome to all our members to Sydney, New South Wales to our Annual General Meeting. It will be on Sat, 20 Oct 2018 07:00 @Sydney. For booking your journey, please consider our partner, booking.com

You can attend the Meeting from around the globe on IRC. Please, save the date: Fri, 19 Oct 2018, 20:00 UTC / 22:00 @Geneva / 16:00 @New York. If you are a member of the community, but not yet of the association, why not become a member now?

Bienvenue à Sydney, Nouvelle Galles de Sud pour l’Assemblé générale 2018 le vendredi 19 octobre 2018 à 22:00 heures de Paris. Pour vos déplacements, veuillez voyager avec notre partenaire booking.com Si vous êtes un membre de la communauté, mais mas encore de l’association, cela sera l’occasion de le devenir jusqu’en octobre!

Willkommen in Sydney zur diesjährigen Generalversammlung. Sie findet am Freitag, 19. Oktober um 22:00 Schweizer/Deutsche/Liechtensteinische/Österreichische/Südtiroler Zeit statt. Sie sie Mitglied der CAcert-Gemeinschaft, aber noch nicht des Trägervereins? Dann werden Sie es jetzt! (Auch wenn Sie in den IRC-Kanal kommen, um nicht ans andere Ende der Welt zu fliegen, gibt es immer wieder Gelegenheiten, eine Reise bei unserem Partner booking.com zu buchen.)

Efail: How you can still trust in GPG/PGP encryption

Leave a reply

Use a safe e-mail client

The EFAIL attacks exploit vulnerabilities in the OpenPGP and S/MIME standards to reveal the plaintext of encrypted emails. In a nutshell, EFAIL abuses active content of HTML emails, for example externally loaded images or styles, to exfiltrate plaintext through requested URLs.

However, according to the German Federal Office for Information Security, the e-mail encryption standards mentioned can be used securely if they are correctly implemented and configured.

There should be no problem, if you and your e-Mail partner use one of the green marked e-mail clients. Even if your client has a red flag, it can be sure; you may do some further research (f.eg. Mailpile). But, do you know the software, others are using? The incident once again demonstrates the importance of trust in communication. Further reading about CAcert’s Web of Trust.

The published vulnerabilities show in particular that, in addition to careful handling of the private key to be kept secret, the security of the e-mail programs used and their configuration can also be decisive.

Basically, do not display or generate e-mails in HTML format.
In particular, the execution of active content, i.e. display of e-mails in HTML format and reloading of external content, should be switched off.
If an e-mail provider offers the possibility to do this via the settings of its webmail application, appropriate measures should also be implemented here.
Some vendors will publish patches that either fix the EFAIL vulnerabilities or make them much harder to exploit. So, update your e-mail client and the encryption extension.

For sensitive information that must be sent by e-mail, the following procedure can be used: Decrypt S/MIME or PGP emails in a separate application outside of your email client. Decrypt incoming encrypted emails by copy&pasting the ciphertext into a separate application that does the decryption for you. That way, the email clients cannot open exfiltration channels. This is currently the safest option with the downside that the process gets more involved.

Webmail seams not to be under attack, neither Mailvelope or PEP. All of them are not affected. So, the conclusion should not be to uninstall encryption, but to review your e-mail client, update it and adjust the properties.

CAcert.org is a community-driven Certificate Authority that issues certificates to the public at large for free. These certificates can be used to digitally sign and encrypt email, authenticate and authorize users connecting to websites and secure data transmission over the internet. CAcert has more than 358 000 users, is operated by volunteers and financed by donations.

Further reading:
OpenPGP is safer than S/MIME (by GnuPG)

New committee constituted

Leave a reply

CAcert Inc.’s Annual General Meeting was held shortly before Christmas. Most of the members of the committee have made themselves available for another year. Two members, who also perform other tasks within the CAcert-community, will focus on this in the future.

On January 12th (January 13th, local time in New South Wales) the committee was constituted. However, he has already started work before. As mentioned at the Annual General Meeting, two points are at the top of the pendency list this year: Balanced finances and progress in moving to Europe.

Neuer Vorstand konstituiert

Kurz vor Weihnachten hat die Generalversammlung von CAcert Inc. stattgefunden. Die meisten Mitglieder des Vorstandes haben sich für ein weiteres Jahr zur Verfügung gestellt. Zwei Mitglieder, die auch noch andere Aufgaben innerhalb der CAcert-Gemeinschaft wahrnehmen, konzentrieren sich in Zukunft auf diese.

Am 12. Januar 2018 (13. Januar Ortszeit in Neusüdwales) hat sich der Vorstand konstituiert. Die Arbeit hat er jedoch bereits vorher aufgenommen. Wie bereits an der Generalversammlung gesagt, stehen dieses Jahr zwei Punkte ganz oben auf der Pendenzenliste: Ausgeglichene Finanzen und Fortschritte im Umzug nach Europa.

Nouvelle composition du comité

L’assemblée générale annuelle de CAcert Inc. a eu lieu peu avant Noël. La plupart des membres du comité se sont rendus disponibles pour une nouvelle année. Deux membres, qui s’acquittent également d’autres tâches au sein de la communauté CAcert, se concentreront sur ces questions à l’avenir.

Le 12 janvier 2018 (le 13 janvier, heure locale en Nouvelle-Galles du Sud), le comité a été constitué. Cependant, il a déjà commencé à travailler auparavant. Comme cela a déjà été mentionné lors de l’assemblée générale, deux points sont en tête de liste cette année: Des finances équilibrées et des progrès dans la migration vers l’Europe.

CAcert Inc. has a new Public Officer

Leave a reply

Hand over in front of the government house in Sydney, New South Wales.

Since 2011, Kevin Dawson held as public officer liaison to the New South Wales government offices. At his own request he would like to step a little shorter. The committee of CAcert Inc. regrets this decision and thanks Kevin for his tireless efforts in the background and wishes him all the best for the future.

These days, the office was handed over to Alexander Samad, who has been a member of the committee since March 2017. Alexander fulfills all legal obligations for this office.

Deutsch: CAcert Inc. hat neuen Public Officer

Rund sechs Jahre war Kevin Dawson als Public Officer der Verbindungsmann von CAcert Inc. zu den Neusüdwalisischen Regierungsstellen. Auf seinen eigenen Wunsch möcht er nun etwas kürzer treten. Der Vorstand von CAcert Inc. bedauert den Entscheid und dankt Kevin für seinen unermüdlichen Einsatz im Hintergrund und wünscht ihm für die weitere Zukunft alles Gute.

Dieser Tage erfolgte die Amtsübergabe an Alexander Samad, der seit dem 31. März 2017 dem Vorstand angehört. Alexander erfüllt alle gesetzlich vorgeschriebenen Pflichten für dieses Amt.

Français: Un nouveau Officer Public pour CAcert Inc.

Depuis 2011, Kevin Dawson était l’officier public pour la liaison avec les organismes gouvernementaux de la Nouvelle-Galles du Sud. À sa propre demande, il avait maintenant pris sa retraite. Le comité de CAcert Inc. regrette cela et aimerait remercier Kevin pour ses efforts inlassables en arrière-plan et lui souhaite le meilleur pour l’avenir.

Cette journée a été la remise officielle à Alexandre Samad, qui appartient au comité depuis le mars 2017. Alexandre répond à toutes les exigences légales pour ce poste.

CAcert’s Committee complete again

Leave a reply

At the annual general meeting held in december 2016, the three seats reserved for Australians, were provisionally suspended. In the meantime, the committee of CAcert Inc. has filled its vacancies at its meeting on March, 31st 2017. Elected were Alexander Samad from New South Wales, Peter Nunn from Victoria and Ross Krumbholz from Queensland.

Deutsch: Der Vorstand von CAcert Inc. ist wieder vollständig.

Bei den Erneuerungswahlen im Dezember 2016 blieben die drei nach gesetzlichen Vorgaben für Australier reservierten Sitze im Vorstand provisorisch frei. In der Zwischenzeit hat der Vorstand von CAcert Inc. an seiner Sitzung vom 31. März 2017 die Vakanzen gefüllt. Gewählt wurden Alexander Samad aus Neusüdwales, Peter Nunn aus Victoria und Ross Krumbholz aus Queensland.

Français: Le comité est de nouveau complet

Lors des élections de renouvellement en décembre 2016, les trois sièges du comité réservés à des Australiens conformément aux dispositions légales sont restés provisoirement indemnes. Entre temps, le comité de CAcert Inc. a élu lors de sa réunion du 31 mars 2017 Alexandre Samad de Nouvelle-Galles du Sud, Pierre Nunn de Victoria et Ross Krumbholz de Queensland.

CAcert 2017

5 Replies

February brought the start of the exhibition season for CAcert with our presence at FOSDEM – one of the biggest Europe-wide developer conferences in Brussels, Belgium. Of course we performed our well-known assurances, which is very popular at such events, with which CAcert safeguards its certificates by checking users’ ID documents. This allows us to offer a safe and trustworthy certificate authority to our users. Of particular note was that interested people were seeking more detailed information about security – questions such as what it actually means, and why are we not yet in the trust stores of many of the web browsers. It’s true that Let’s encrypt is trusted by the popular browsers, but if you take a close look at the certificate of a site protected with a Let’s encrypt certificate, you will find out that it does not contain any information about the owner. This means it is impossible to verify the identity of the site and therefore it is basically uncertain to which site the browser is actually connected to. CAcert allows the site owner to publish identification information in the certificate after the assurance – for private users as well as for companies. This way, CAcert offers a clear mutual trust, which makes it worth importing the CAcert-Root-certificate from www.cacert.org.

But there’s more: CAcert offers client certificates as well and signs GPG/PGP keys. Anyone who always wanted to sign his emails and encrypt them if needed, can do this easily with CAcert. Most email clients supports S/MIME certificates or PGP. By this means the authenticity of the sender is verified, and the receipient can verify the name of the certificate owner. Also attachments like PDF can be signed this way and protect the document against later changes.

CAcert is supported by an Australian non-profit association, the operation of the server is safeguarded by the German incorporated society secure-u. This structure has advantages, but the Australian society is possible only as long as CAcert has at least three Australian residents as members of the board. In 2017 we want to bring the association behind the web of trust to Europe. This limits the resources of many of the active members, because the handover must be done under appropriate rules. Anyone who wants to support CAcert can find more details at recent blog post “Prosit 2017” or can send an e-mail to support@cacert.org

For a secure 2017!
Your CAcert

Two members of CAcert Inc. honored for loyal services

Leave a reply

In a few hours, the year 2016 will be over. So, the secretary of the new elected committee of CAcert Inc., the infrastructure partner of the CAcert comunity, had just enough time, to show his gratitude to two members of the association who were active in the association for exactly five years. That is the reasons, why he handed over them a (virtual) golden watch as sign of thank you.

Kevin Dawson from New South Wales, the home of CAcert, became Public Officer in 2011 and remained in this function until 2016. As public officer, he dealed with the New South Welsh government and was contact person for the Office of Fair Trade and CAcert’s bank. Furthermore, Kevin Dawson, had a seat in the committee from 2011 to 2013 and in the transition committee in summer 2016. We sincerely thank Kevin for his excellent work, which he has done silently at the other end of the world, but always exactly and well, and regret that he is now concentrating on new things.

The second gold watch for five year loyal services to CAcert Inc. was handed over to Dirk Astrath from Germany, the country with the most community-members. He startet – at the same time as Kevin as Public Officer – as assessor in the committee. Later he hold the functions of secretary, vice president and president with exception of winter 2015/2016. If everything goes well with the “move” of CAcert Inc. Dirk will have been the last president of the Australian association.

Statement of direction given by SGM

Leave a reply

Dear members,

there were some mails which were referencing the direction of the new board. This is interesting as the new board so far did not give any statement. Also no new board member either at the SGM nor later did such a statement. Even while it is assumed by many, that I am close to the new board or some of its members, I do not have a clear view what the new board will do.

CC BY NC SA HDZimmermann

However, there WAS a direction given last Saturday. It was given by the statement of direction given by SGMof CAcert Inc with the voice of the SGM. The new board is bound to respect this statement.

The statement of the SGM is:
“The membership is disheartened by the recently elected committee and its persistent disrespect for properly established arbitration, policies and procedures. It is resolved, that the committee as constituted no longer enjoys the confidence of the members, and each committee member is removed from their position. We stopped short to resolve, that CAcert Inc has been placed into an unacceptable breach of our CAcert Community Agreement, is no longer acting in the interests of the community, and is therefore no longer a suitable vehicle for the community’s property and role as executive.

And instead resolve,
* that CAcert Inc’s actions were the sole responsibility of the committee members.
* that CAcert Inc with a duly formed committee that respects and abides by the rulings of arbitration enjoys our confidence in the future,
* and that the liabilities of CAcert Inc during the period of troubles should remain strictly limited under our DRP as if arbitration was not suspended.

The new committee is to create a detailed and fully transparent, uncensored report of the old committee’s activities since the AGM to which all members of the community may contribute. This report is to be presented to a general meeting for ratification.”

As the one who was selected to do the minutes, I so far can verify the counting of the votes for any part of this statement. I give a CARS that the votes counted by the vote-bot match those of 3 logs of the irc-channel and the proxy-votes were done according to a list created by the former secretary. With the exception of the “we stopped short”-motion, all these parts were given with a clear or even overwhelming majority:

“disheartend sentence”: 28 : 8 : 3
“board removed”: 22 : 14 : 4
“unacceptable breach”: 15 : 16 : 9
“responsibility of old board”: 29 : 11 : 0
“report”: 38 : 0 : 3
[aye : naye : abstain]

41 members-votes were present during those decisions.

Kind regards,
Eva Stöwe, CARS