Dear Jonathan
This are in fact good questions.
1. Import the root certificate
In principle, the root certificate must always be imported for the first
time. However, the root certificates of some commercial certificate
authorithies are already stored in the browsers. However, for this purpose
regular audits have to be carried out by again audited audit companies,
which far exceeds CAcert's financial possibilities (without guarantee of
success, as examples of commercial competitors show).
I looked at your side for a moment. Since you have integrated videos from
Youtube, you have to inform the users of your site that Youtube/Google
collect and process personal data of your users according to the new data
protection directive of the EU (GDPR) from May 25, 2018 anyway. In order to
prove this in case of a dispute, I have seen many pages that display a
pop-up with this information and ask visitors to confirm that they have
read it (user must tick the box and click OK).
This makes it easy to include the root certificate immediately: Like this,
for example:
( ) Yes, I take note that the data is collected in accordance with the
(linked) data protection declaration.
( ) Yes, I agree that this page is transmitted using the secure SSL
protocol and that the root certificate of Charityneed's certificate
authorithy (link) CAcert is installed in my browser.
OK / Cancel
2. Non profit
Inf fact, CAcert Inc. is a non profit organisation (Inc. meens
"incorporated association" in New South Wales), even we are not registered
at ACNC for the moment.
see here: http://wiki.cacert.org/CAcertInc
and our statutes (see §43):
http://wiki.cacert.org/Brain/CAcertInc/AssociationRules#Part_5_Miscellaneous
We are regulated by the government of New South Wales.
As there was never a need (and the committee mostly not composed of
Australians in the last years), we are in fact not yet registered at ACNC,
but I startet the processus this morning. As a member of the council of a
similar organisation as yours, I understand absolutely your criterias. In
the past, IT people in particular were active at CAcert. This is really
good for the technical aspects. Other things (like ACNC) were
unfortunately somewhat out of focus. However, I am open to your enquiry. I
hope I can keep you informed of further progress by the end of the week or
in the course of next week.
3. Organisation Assurance
For the Organisation Assurance, there is in fact an Organisation Assurer
living in the United Kingdom. He will get in touch with you directly.
Best regards
Etienne
--
The Secretary
CAcert Inc.
Hangar 10
Airfield Avenue
Murwillumbah NSW 2484
New South Wales
Thank you Etienne,
One question on all that is (please forgive my ignorance), by importing
this root certificate, does that mean everyone else has to go through the
same process if they want to be sure they will be viewing a safe and
secure
site trusted by CAcert?
I can't see people doing this on the internet. Am I missing something?
Do you need help with this project?
Forgive my questioning, there is a valid reason for it. CNF is an
organisation governed to promote and market voluntary sector
organisations
and their campaigns. One of the reasons we had come to you is that we
understood you to be a nonprofit, however, we have already tried to look
into who regulates you or where you are registered and we have drawn a
blank everywhere including the ACNC
<http://www.acnc.gov.au/ACNC/FindCharity/QuickSearch/ACNC/OnlineProcessors/Online_register/Search_the_Register.aspx?noleft=1>,
so can I ask, are you a tax except nonprofit, a registered charity or
neither?
I ask this because we may be able to help in a very small way with regard
to promoting awareness if you are a regulated organisation. Regulated
meaning tax except or a registered charity..
If this is of interest to you please let me know, along with your
regulator's name and the identification number given, otherwise, by our
governance, we won't be able to offer that small help.
Kind regards
Jonathan Fleming
(CNF Trustee)
*charityneeds.com <http://charityneeds.com/>*
On 22 May 2018 at 06:59, Etienne Ruedin (CAcert Inc.)
Post by Etienne Ruedin (CAcert Inc.)Dear Jonathan
(1) As most browser do not have allready importet our root certificate,
please do this on your own. You can import the CAcert's root
certificates
Post by Etienne Ruedin (CAcert Inc.)http://wiki.cacert.org/FAQ#New_Root_Certificates
(2) The Organisation Assurance Program is an additional program to the
individual Assurance program (see
http://wiki.cacert.org/OrganisationAssurance). The purpose of the
Organisation Assurance program is to assure Organisations instead of
individuals. Following the official list, there is no Organisation Assurer
availabl in England and Wales. But do not worry. I have allready contactet
someone that could assure your orgaisation. I will write to you more
details as soon as possible.
Best regards
Etienne
Post by CAcert SupportHi Support-forum,
could pleases someone answer the question to Jonathan?
--
Kind Regards
Karl-Heinz Gödderz
CAcert support
CAcert needs funding to keep its services running, so if you find our
project useful please consider donating. For more information see
http://www.cacert.org/index.php?id=13
Betreff: [CAcert.org] Possible SPAM
Datum: 2018-05-20 22:46:45
From: Jonathan Fleming
Subject: Join Your Membership - This link is insecure - invalid cert
My first problem is that when I try to use your join link it tells me
your certificate is invalid. Is there a problem here and when can I use
the link securely.
Secondly we are a registered charity called Charity Needs Foundation
(CNF), registered with the Charity Commission for England Wales by
number 1168917, however, are we allowed a certificate as an entity. I
have read that entities cannot be supplied certificates from CAcert
I look forward to hearing from you on both counts.
Jonathan Fleming (CNF Trustee)
---- Ende der weitergeleiteten Nachricht ---
--
Commonwealth of Australia