Re: [Savannah-help-public] missing SSL cert from savannah site

2009-10-17 Thread Richard Stallman
IOW, you suggest to continue feeding the monster and actively discourage community-driven CAs. I don't think our decision will have any effect on the success of CAcert. Support from sites like ours is not what it needs most, not now.

Re: [Savannah-help-public] missing SSL cert from savannah site

2009-10-17 Thread Yavor Doganov
Richard Stallman wrote: > I know nothing about this; I might not know how to do it. > I hope you are not saying that people like me are unimportant > when we judge what Savannah should do. No, not at all. It's perfectly OK not to know or bother (but we provide simple instructions for those who ca

Re: [Savannah-help-public] missing SSL cert from savannah site

2009-10-17 Thread Richard Stallman
I rather think that the Mozilla decision is blindly based on a more widespread $75000 audit from Webtrust, which CAcert cannot afford. The independant audit requested them to make changes that were not required from other certification providers. That doesn't change anything for ou

Re: [Savannah-help-public] missing SSL cert from savannah site

2009-10-17 Thread Richard Stallman
More importantly, I fail to see what the problem is, really. If the user is clueless enough and doesn't understand how to validate a certificate, what good it does if we choose a certificate that is included in a (popular) particular program? I know nothing about this; I might not