[s20180413.6] [CAcert.org] Possible SPAM

[CAcert Support]

Hello support-forum,
can please someone help Carel?
--
Kind Regards
Karl-Heinz Gödderz
CAcert support

CAcert needs funding to keep its services running, so if you find our project useful please consider donating. For more information see http://www.cacert.org/index.php?id=13
---- Weitergeleitete Nachricht von ***@gmail.com ---

Von: ***@gmail.com
An: ***@cacert.org
ReplyTo: ***@gmail.com
Betreff: [CAcert.org] Possible SPAM
Datum: 2018-04-13 06:48:19

From: Carel Lubbe
Subject: unable to login to my account
Hi Support,
I am unable to login to my account.... when use the account verification
"Error!
The ID or Hash has already been verified, or something weird happened."
Is it possible for you to have a look at why I am unable to log into my
account?
Kindest regards,
Carel

---- Ende der weitergeleiteten Nachricht ---

[CAcert Support]

Hello support forum,
can someone please help Philip with his question?
also look at the PSs.
and don't forget to CC the original sender.
--
Kind Regards
Karl-Heinz Gödderz
CAcert support

CAcert needs funding to keep its services running, so if you find our project useful please consider donating. For more information see http://www.cacert.org/index.php?id=13
---- Weitergeleitete Nachricht von ***@gmail.com ---

Von: ***@gmail.com
An: ***@cacert.org
ReplyTo: ***@gmail.com
Betreff: [CAcert.org] Possible SPAM
Datum: 2018-04-13 06:47:58

From: Philip
Subject: Cert for intranet or internal name
Subject: SSL for internal names
Hi
Can you use Cacert to secure internal names that aren't public?
Am I allowed to market it and ask for deployment or install fees?
For example a business has a request for Globalsign intranetssl and I
will suggest Cacert as a free alternative to it.
Thanks!

---- Ende der weitergeleiteten Nachricht ---
PS: this form doesn't send if 3rd party cookies blocked?
PS: I have issues sending this in chrome

[Etienne Ruedin (CAcert Inc.)]

Hello Philip

You ask two questions (internal names; install fees). I will you give an
answer for the second one:

First of all, what is regulated: the issue of certificates and assurance.
- The certificates are free.
- No money may be charged for assurance, except for travel costs if the
assurer comes to the assuree and the travel costs have been agreed in
advance.

The CCA says:
"1.2 Licence
As part of the Community, CAcert offers you these rights:
You may USE any certificates issued by CAcert.
You may RELY on any certificate issued by CAcert, as explained and
limited by CPS (COD6).
You may OFFER certificates issued to you by CAcert to Members for their
RELIANCE.
You may OFFER certificates issued to you by CAcert to NRPs for their
USE, within the general principles of the Community.
This Licence is free of cost, non-exclusive, and non-transferrable."

After that: What is not regulated: technical help and on site assistance.
If you help your old mom or a friend, he might offer them a cup of tea.
However, if you do this professionally, it is a common business field in
the open source area: free software (or here: free certificate), paid
service.

If this is your business, make sure you communicate this clearly to the
customer from the very beginning. So I would list the Free Certificate with
the amount 0.00 in the offer, also the assurance with a certain amount of
time (x minutes) and the amount 0.00, so that your client cannot suddenly
say that the assurance has been paid with money you asked for other
services.

Please note that I am writing this as a member of the community. Perhaps
someone else can confirm or clarify that.

Best regards
Etienne

Post by CAcert Support

From: Philip
Subject: Cert for intranet or internal name
Subject: SSL for internal names
Hi
Can you use Cacert to secure internal names that aren't public?
Am I allowed to market it and ask for deployment or install fees?
For example a business has a request for Globalsign intranetssl and I
will suggest Cacert as a free alternative to it.
Thanks!

---- Ende der weitergeleiteten Nachricht ---
PS: this form doesn't send if 3rd party cookies blocked?
PS: I have issues sending this in chrome

[Carel Lubbe]

Hi Karl-Heinz and team,

Do we have any movement on my request... I am in a bind and would really
appreciate your assistance?

Kindest regards,
Carel

Post by CAcert Support
Hello support-forum,
can please someone help Carel?
-- Kind Regards Karl-Heinz Gödderz CAcert support CAcert needs funding
to keep its services running, so if you find our project useful please
consider donating. For more information see
http://www.cacert.org/index.php?id=13 ---- Weitergeleitete Nachricht
[CAcert.org] Possible SPAM Datum: 2018-04-13 06:48:19

From: Carel Lubbe
Subject: unable to login to my account
Hi Support,
I am unable to login to my account.... when use the account verification
"Error!
The ID or Hash has already been verified, or something weird happened."
Is it possible for you to have a look at why I am unable to log into my
account?
Kindest regards,
Carel

[Aleš Kastner]

Hello Carel!
I saw a "well corrected" link long before. So please, if you trust me, send the link to me, or you possibly can forward the whole message to me? I'll look whether it is such a case.
Best Regards,
Aleš Kastner

-----Original Message-----
From: cacert-support-***@lists.cacert.org [mailto:cacert-support-***@lists.cacert.org] On Behalf Of Carel Lubbe
Sent: Monday, April 16, 2018 1:53 PM
To: CAcert Support <***@cacert.org>; cacert-***@lists.cacert.org
Subject: Re: Fwd: [s20180413.6] [CAcert.org] Possible SPAM

Hi Karl-Heinz and team,

Do we have any movement on my request... I am in a bind and would really appreciate your assistance?

Kindest regards,
Carel

Post by CAcert Support
Hello support-forum,
can please someone help Carel?
-- Kind Regards Karl-Heinz Gödderz CAcert support CAcert needs funding
to keep its services running, so if you find our project useful please
consider donating. For more information see
http://www.cacert.org/index.php?id=13 ---- Weitergeleitete Nachricht
[CAcert.org] Possible SPAM Datum: 2018-04-13 06:48:19

From: Carel Lubbe
Subject: unable to login to my account
Hi Support,
I am unable to login to my account.... when use the account
"Error!
The ID or Hash has already been verified, or something weird happened."
Is it possible for you to have a look at why I am unable to log into
my account?
Kindest regards,
Carel

[Aleš Kastner]

Hello Carel!

The 1st step has been done (roots).

The error message you have sent as reply to the Email ping link "http://www.cacert.org/verify.php?type=email&emailid=237965&hash=771415f5ae42c92408244973a0832179" was "Error! The ID or Hash has already been verified, or something weird happened." This AFAIK means that your account was successfully activated before, and that link is obsolete now.

Now the question is: Are you absolutely sure your username & password typing time under 5 seconds?

If so, I can verify the existence of your account, BUT I need your date of birth (day, month, year). Only the Support Engineer (SE) is allowed to check/modify your account.

I suppose you are unable to login with your client certificate (you have none, or it is expired).
Also I suppose you know exactly all answers to the 5 questions (which are case sensitive etc.).

Only the SE can change your password and unlock your account, not me. And this suppose payment 15€.
So we should test login in 5 or less seconds first, then I can test your account existence if you tell me your DoB, all free of charge.
If the problem persists, you will have to pay, or create another account and file a dispute.

Best Regards,
Aleš Kastner

-----Original Message-----
From: Carel Lubbe [mailto:***@gmail.com]
Sent: Wednesday, April 18, 2018 9:02 AM
To: Aleš Kastner <***@volny.cz>
Subject: Re: Fwd: [s20180413.6] [CAcert.org] Possible SPAM

Hi Ales,


Firstly thanks for taking the time to assist....

I have successfully imported the root cert for my chrome browser using the following guide:

http://wiki.cacert.org/FAQ/BrowserClients

After the import and restarting chrome i retried my login to cacert but had exactly the same responces please see included screenshots:

Could you check of my account exist... and posibly enable it if its disabled or locked and reset my password please?

Kind regards,
Carel

Hello Carel,
I can see from the picture you have sent, that your browser (possibly
Chrome, or Firefox, or which?), or your OS, has no CAcert root installed.
It is necessary to install roots before you can log in.
Please keep in mind that the Firefox (if your case) has its own cert
repository.
You can also read this article: https://wiki.cacert.org/FAQ/Mess/ Best
Regards, Aleš Kastner

[Aleš Kastner]

Hello Carel!

Things are more clear now.
The CAcert's Web reports, that it has _NO_ Email address ***@gmail.com in the system. (Using your DoB.)

So please try to remember, whether there were really gmail.com, as I am not sure about its existence 10 years ago.
You can create a new account freely at the same time.

BTW: There is increasing number of users who cannot login, so our interest is to find out why.
Thank you for your co-operation, and feel free to ask me or Support for more help.

Best Regards,
Aleš Kastner