On Tuesday 06 January 2015 at 14:45:49, Werner Koch wrote:
> > Btw: Also the TLS configuration of wiki.gnupg.org is not as good as the
> > one for gnupg.org (e.g. support for TLS 1.2), see
> > https://www.ssllabs.com/ssltest/analyze.html?d=wiki.gnupg.org
>
> Well, maybe they can give some insights.

We will look into this.
Probably elder settings for a low security side.

(Thanks for the direct copy, as I am reading this list occasionally 
and sometimes miss emails.)

On Wednesday 07 January 2015 at 03:25:28, MFPA wrote:
> I don't see what they gained by signing the cert with
> that CA rather than leaving it as self-signed.

You can get our root cert from 
  https://ssl.intevation.de/
Traditionally we run our own little CA. It serves testing purposes
and it allows us production use for lower security levels for less costs.
(So we do not feed the CA business as much. A business that Werner for the 
most part considers heavily broken.)

Best,
Bernhard


-- 
www.intevation.de/~bernhard (CEO)    www.fsfe.org (Founding GA Member)
Intevation GmbH, Osnabrück, Germany; Amtsgericht Osnabrück, HRB 18998
Owned and run by Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

Attachment: signature.asc
Description: This is a digitally signed message part.

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to