Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-28 Thread Mike Williams
On Friday 28 September 2007 01:10:48 Robin H. Johnson wrote: > > Is there a reason that my Godaddy suggestion in the bug isn't being > > considered? Regardless of what you may think of them as a company, they > > offer the same free type of certificate to open source projects just like > > cacert,

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-28 Thread Lars Weiler
* Robin H. Johnson <[EMAIL PROTECTED]> [07/09/27 15:11 -0700]: > Go and read ALL of this bug: > http://bugs.gentoo.org/show_bug.cgi?id=108944 > Pylon and myself, as folk in favour of CA-Cert tried to get the ball > rolling to get Organization-level certs from CACert. It seems to have > long blocked

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Robin H. Johnson
On Thu, Sep 27, 2007 at 06:47:36PM -0400, Caleb Tennis wrote: > Is there a reason that my Godaddy suggestion in the bug isn't being > considered? > Regardless of what you may think of them as a company, they offer the same > free type > of certificate to open source projects just like cacert, an

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Caleb Tennis
> On Thu, Sep 27, 2007 at 05:23:26PM +0200, Hanno B??ck wrote: >> Well, I hope I don't have to tell that self-signed certs are not really good >> security policy. > Whether or not self-signed certs are secure or insecure depends entirely > on your definition of 'secure'. > - Is the traffic encrypte

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Robin H. Johnson
On Thu, Sep 27, 2007 at 05:23:26PM +0200, Hanno B??ck wrote: > Well, I hope I don't have to tell that self-signed certs are not really good > security policy. Whether or not self-signed certs are secure or insecure depends entirely on your definition of 'secure'. - Is the traffic encrypted betwee

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Doug Goldstein
Andrew Gaffney wrote: > Hanno Böck wrote: >> I think compared to self-signed, having cacert-certificates would be >> a big improvement. Many other free software projects (and more and >> more other pages) use cacert, so it becomes more and more likely that >> people will already have the cacert-roo

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Hanno Böck
Am Donnerstag 27 September 2007 schrieb Andrew Gaffney: > How does a CAcert certificate help? Their own certificate for > https://www.cacert.org/ can't be verified by Firefox 2.0.0.7, which tells > me that their CA isn't trusted by default. They're workin on that, goal is to include in ff. But any

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Andrew Gaffney
Hanno Böck wrote: I think compared to self-signed, having cacert-certificates would be a big improvement. Many other free software projects (and more and more other pages) use cacert, so it becomes more and more likely that people will already have the cacert-root-cert installed. How does a C

Re: [gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Petteri Räty
Hanno Böck kirjoitti: > > I think compared to self-signed, having cacert-certificates would be a big > improvement. Many other free software projects (and more and more other > pages) use cacert, so it becomes more and more likely that people will > already have the cacert-root-cert installed.

[gentoo-dev] SSL-Certificates and CAcert

2007-09-27 Thread Hanno Böck
Hi, Everytime I'm sending out a mail with my gentoo.org-address, I get this "certificate may be unsecure" message. Gentoo mailserver (and forums, bugzilla and probably many more) use self-signed ssl-certificates. Well, I hope I don't have to tell that self-signed certs are not really good secu