Re: X.509 certificates for https://gnupg.org

2013-12-17 Thread Aleksandar Lazic
Hi Werner. Am 17-12-2013 16:37, schrieb Werner Koch: On Mon, 16 Dec 2013 21:35, d...@fifthhorseman.net said: Werner, if i can help with configuring or maintaining the web server for gnupg.org to address some of these issues, please let me know. Yes, I have problems to figure out a woking ci

Re: X.509 certificates for https://gnupg.org

2013-12-17 Thread Micah Lee
On 12/17/2013 02:04 AM, Werner Koch wrote: > You must be running with JavaScript enabled ;-). This seems to be from > Piwik, which I recently installed to gather web statistics. I am not > really happy with that but my campaign manager said that it is really > needed and that organization like th

Re: X.509 certificates for https://gnupg.org

2013-12-17 Thread Werner Koch
On Tue, 17 Dec 2013 18:52, d...@fifthhorseman.net said: > I think it depends on what flavor of IE you're using (and what version > of the underlying OS you're using as well). The version of schannel in Seems so. I updated my Windows 7 box to IE11 with no channel. Maybe I need to update more.

Re: X.509 certificates for https://gnupg.org

2013-12-17 Thread Daniel Kahn Gillmor
On 12/17/2013 10:37 AM, Werner Koch wrote: > On Mon, 16 Dec 2013 21:35, d...@fifthhorseman.net said: > >> Werner, if i can help with configuring or maintaining the web server for >> gnupg.org to address some of these issues, please let me know. > > Yes, I have problems to figure out a woking ciph

Re: X.509 certificates for https://gnupg.org

2013-12-17 Thread Werner Koch
On Mon, 16 Dec 2013 21:35, d...@fifthhorseman.net said: > Werner, if i can help with configuring or maintaining the web server for > gnupg.org to address some of these issues, please let me know. Yes, I have problems to figure out a woking cipher list which also allows for IE. What DHE cipher su

Re: X.509 certificates for https://gnupg.org

2013-12-17 Thread Werner Koch
On Tue, 17 Dec 2013 04:05, mi...@micahflee.com said: > torproject.org is pretty much an ideal example. They serve binaries of > Tor Browser Bundle from https://www.torproject.org/ and have been > attacked by governments all over the world, so they've put a lot of time > and energy in doing things

Re: X.509 certificates for https://gnupg.org [was: Re: Another step towards crowdfunding]

2013-12-16 Thread Micah Lee
On 12/16/2013 12:35 PM, Daniel Kahn Gillmor wrote: > Regardless of how you feel about the CA cartel in general, StartSSL is > not the only member of the cartel offering gratis certs, particularly > for well-known free software projects Oh interesting, I didn't realize there were other CAs that gi

Re: X.509 certificates for https://gnupg.org [was: Re: Another step towards crowdfunding]

2013-12-16 Thread Robert J. Hansen
for well-known free software projects (Also, as a business in Israel, StartSSL is the target of an ongoing international boycott due to Israeli domestic policy -- http://www.bdsmovement.net/). Although I support each person's right to believe what they want with respect to Israeli domestic po

X.509 certificates for https://gnupg.org [was: Re: Another step towards crowdfunding]

2013-12-16 Thread Daniel Kahn Gillmor
On 12/16/2013 02:32 PM, Micah Lee wrote: > Also, looks like the CA is CAcert--an awesome CA, but not trusted by > browsers by default. I'd suggest getting a cert from StartSSL > [https://startssl.com/], since they're they only CA that gives certs for > free. And a wildcard cert (for *.gnupg.org) en