you can't speak for other people Jalyst.

I don't understand what you are trying to do here.Is it official or just a precaution? Have nokia pulled the plug yet(new year)?

Re-read my prior post, typo...

In a nutshell they're trying to setup a self-governing legal entity, which has proper separation of powers, so that corruption/nepotism can be minimized etc.

Do not really knwo where to place that, so I ask here:
I think the council is aware of that, but I cannot remember of a statement, if we are going to keep bugs.maemo.org open?

Noted for the next meeting with Nemein.

We are still struggling to gain administrative rights over the current infrastructure and the process is being painful. Hopefully, the creation of the NFP should speed up the transition.

FYI: Part of this is due to the drop in personnel at Nokia. The current operator at Nemein has been having problems getting connected with people inside Nokia that used to handle getting these done. (They always got them from Nokia, as Nokia has an agreement with a current signing authority.)

There's a good chance that once things move over to the NFP we will have to purchase as set of SSL certificates. In reality, the "security" issue is pretty null. All it means is you have to accept that the certificate is out of date and store that exception. Once you do, that one certificate will continue to work until it's replaced or corrupted.

Isn't it possible to delay or overcome purchasing SSL certificates? Totally wild guess (haven't checked current prices), but it seems that they're not cheap, and as said, security issue is null. doesn't sound like first need, unless we're going to bath in money from donations it could wait.

/Estel

These days one can get free-beer certificates from organisations like CAcert or StartSSL. Bonus points for publishing appropriate TLSA records.

While true, there are limits on the use of the "free" certs they make. Realistically, a 2 year cert for *.maemo.org can be had for under $50, which isn't going to break the bank. And if we're skimming that close to the edge while trying to keep servers up and running... Yes, this will be low priority, but it should be on the list none the less.

The question is - are the "limits" on free certs painful for us, or totally irrelevant for maemo.org? Even if it's cheap to get non-free cert, we shouldn't waste any amount of money, where not necessary, be it 50$ or 500$.

In short, are free certs feasible enough for us? If no, why so?

/Estel

Any certificate is fine as far as I'm concerned, as long as we have one, and it's verifiable.