Though there are some security risks in \&quot;advance assuring\&quot; it is currently an accepted practice for assurances during events (like trade fairs), just because the majority of people coming to a trade fair booth to be assured will not have an account. In individual assurances you should check in advance wether the account already exists and tell the assuree that s/he should create the account before the assurance.

It is not advisable to use a public terminal to create a CAcert account, because you never know which keyloggers or browser plugins are installed on such a terminal. It is tolerable if you can guarantee that the terminal is clean (for example, because it is your own laptop) and nobody is watching.

There are only very few thinkable cases where it is tolerable to create an account for someone else! Maybe as a guardian of a severly handicapped person...