Hi, IIRC, we currently don't have CA-certified SSL certificates on Gentoo properties because the infrastructure people who handle that kind of stuff really dislike giving up their personal information to a corporation like a CA. Would it be possible to break that logjam by volunteering for the job of requesting the certificates?
I think it's really quite silly that we keep inconveniencing ourselves and our user by not having proper certificates that get recognized by all the major browsers, preferably wildcard variants (particularly for Bugzilla attachments). I'd be happy to handle the certificates and renew them every time when needed, passing them on to infra staff via a channel they deem secure enough, although it would be nice if someone else can provide me with funds (e.g. the Trust/Foundation?). Cheers, Dirkjan