CACert offers X.509 certificates for free. You can use these certificates for email signing and encryption, as well as securing your server services.

The CACert can offer these services for free because it builds a web of trust: you need a CACert assurer to verify your identity. The assurer then can give you trust points, and based on your point level you’re allowed to get certificates with different trust levels. If you gather 100 points, you’re granted the assurer permissions which means that you can assure other people.

I think this is a really nice idea: CACert brings the grass-root principles of GPG to the X.509 world. Unfortunately, the browsers currently do not trust the CACert root certificate (which means you still need to confirm that you trust a certificate issued by CACert). But the process is on the way for Firefox & Co. And using CACert certificates is a better way than using your self-signed certificates anyway…

BTW, if you’re in Kaiserslautern, the CACert site lists about 25 assurer (login required) that can help you to verify your identity.

Contact me by mail: md@gonium.net. I am also gonium on IRCnet.

My CACert public key is here.

Legal mumbo-jumbo a.k.a. Impressum

German law forces me to include this stuff, so here we go:

Mathias Dalheimer
Meisenweg 2
67663 Kaiserslautern
Tel.: +49 631 31600 4484

E-Mail: md@gonium.net
Internet: http://gonium.net

Inhaltlich Verantwortlicher gemäß § 10 Absatz 3 MDStV: Mathias Dalheimer (Anschrift siehe oben)

Haftungshinweis: Trotz sorgfältiger inhaltlicher Kontrolle übernehmen wir keine Haftung für die Inhalte externer Links. Für den Inhalt der verlinkten Seiten sind ausschließlich deren Betreiber verantwortlich.