Active Topics
-
Maemo repository (27)
to Community by dredlok706 - 20 hrs, 16 mins ago -
Sailfish OS for the Motorola Moto G7 Power (XT1955-5) - (ocean) (14)
to SailfishOS by edp17 - 1 day, 2 hrs ago -
Mono Diablo Packages (0)
to OS2008 / Maemo 4 / Chinook - Diablo by meetpatty - 4 days, 8 hrs ago - more...
|
|
2017-08-09
, 15:26
|
|
Guest |
Posts: n/a |
Thanked: 0 times |
Joined on
|
#12
|
I hate to ask a potentially simple question; however the discussion as to what has to be done seems to lean towards Let's Encrypt. But my question is surrounding the when.
Each time I click the header navigation here, I get a warning. I hate that warning.
Each time I click the header navigation here, I get a warning. I hate that warning.
| The Following 10 Users Say Thank You to For This Useful Post: | ||
|
2017-08-09
, 15:59
|
|
Posts: 1,301 |
Thanked: 4,322 times |
Joined on Oct 2014
|
#13
|
Originally Posted by vitaminj
Whatever is chosen, it’s fine with me. Letsencrypt is free, and trusted.
Why a commercial certificate? A cheap commercial one (or free StartCom) is no "better" than a let's encrypt one, unless we are concerned about the cert chain baked into old devices (N900/N9 I assume) not including let's encrypt.
But let's encrypt isn't dodgy, shoddy, confusing, complicated or anything. You run one script and it's all automated for you, including changing apache (or other server) config, that's the whole point of the thing.
Seriously, anyone who's ever "set up" let's encrypt would never look back to using StartCom or paying tens of $currency for a cheap non-EV cert. I remember those old days with horror, all the manual faffing that used to be required.
Startcom on the other hand, is neither. So please don’t use that.
__________________
You can still support my work by donation - click here
You can still support my work by donation - click here
| The Following 7 Users Say Thank You to nieldk For This Useful Post: | ||
|
|
2017-08-09
, 18:17
|
|
Posts: 3,328 |
Thanked: 4,476 times |
Joined on May 2011
@ Poland
|
#14
|
I think you should get any certificate, even from Let's Encrypt, just so that you have more 90 days to debate.
Adding an exception every time I visit tmo is at least irritating.
Adding an exception every time I visit tmo is at least irritating.
| The Following 9 Users Say Thank You to marmistrz For This Useful Post: | ||
|
|
2017-08-12
, 11:14
|
|
Posts: 39 |
Thanked: 117 times |
Joined on Apr 2010
@ Norway
|
#15
|
Nice! So the certificate yesterday got updated to a Let's Encrypt certificate for the next three months.
|
|
2017-08-12
, 12:55
|
|
Posts: 1,301 |
Thanked: 4,322 times |
Joined on Oct 2014
|
#16
|
Marvelous !
Better than most
Better than most
__________________
You can still support my work by donation - click here
You can still support my work by donation - click here
| The Following 11 Users Say Thank You to nieldk For This Useful Post: | ||
 |
|
2017-08-12
, 22:36
|
|
Community Council |
Posts: 1,669 |
Thanked: 10,227 times |
Joined on Nov 2014
@ Lower Rhine
|
#17
|
Nice choice!
The 90 days xpiration is a good thing and should be done by all others too. It is hard to revoke a cert so it limits damage from key compromise and mis-issuance to have short lifespans.
I plead for RFC change to max 90 days
Also it would encourage other authorities to automate the renewal like letsencrypt does because manual renewal would become really expensive.
The 90 days xpiration is a good thing and should be done by all others too. It is hard to revoke a cert so it limits damage from key compromise and mis-issuance to have short lifespans.
I plead for RFC change to max 90 days
Also it would encourage other authorities to automate the renewal like letsencrypt does because manual renewal would become really expensive.
__________________
Watch our weird watchfaces for mighty AsteroidOS
Performance comparison Video Sailfish 2.0 vs 1.1.9 vs 1.1.7
[MC eV] Maemo Community eV membership application please concider to join!
Watch our weird watchfaces for mighty AsteroidOS
Performance comparison Video Sailfish 2.0 vs 1.1.9 vs 1.1.7
[MC eV] Maemo Community eV membership application please concider to join!
| The Following 5 Users Say Thank You to mosen For This Useful Post: | ||
But let's encrypt isn't dodgy, shoddy, confusing, complicated or anything. You run one script and it's all automated for you, including changing apache (or other server) config, that's the whole point of the thing.
Seriously, anyone who's ever "set up" let's encrypt would never look back to using StartCom or paying tens of $currency for a cheap non-EV cert. I remember those old days with horror, all the manual faffing that used to be required.