From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 3EFBE138CC4 for ; Sun, 29 Mar 2015 17:34:06 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E7DDDE09C5; Sun, 29 Mar 2015 17:34:00 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id E41CDE0996 for ; Sun, 29 Mar 2015 17:33:59 +0000 (UTC) Received: from symphony.aura-online.co.uk (154.189.187.81.in-addr.arpa [81.187.189.154]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: chewi) by smtp.gentoo.org (Postfix) with ESMTPSA id A1F9D340BA9 for ; Sun, 29 Mar 2015 17:33:58 +0000 (UTC) Date: Sun, 29 Mar 2015 18:33:47 +0100 From: James Le Cuirot To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Should Gentoo do https by default? Message-ID: <20150329183347.7b4c3159@symphony.aura-online.co.uk> In-Reply-To: <20150329192351.61ec477e@pomiot.lan> References: <20150327153315.1788c2f7@pc1.fritz.box> <20150329164605.60784c51@pomiot.lan> <20150329185017.639e56b6@pc1.fritz.box> <20150329192351.61ec477e@pomiot.lan> X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.27; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; boundary="Sig_/Kaacms/FD1pKmbjG3HybKI7"; protocol="application/pgp-signature" X-Archives-Salt: d7af3633-2b38-478b-b31d-c91e8c1b6474 X-Archives-Hash: 5e14b20f79feb7f48b9248c8bda496a6 --Sig_/Kaacms/FD1pKmbjG3HybKI7 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Sun, 29 Mar 2015 19:23:51 +0200 Micha=C5=82 G=C3=B3rny wrote: > Xperia X10 Mini, with ancient Android 2.1. >=20 > bugs.gentoo.org works, though it complains about hostname mismatch (I > guess it doesn't handle wildcard certs or sth). Not exactly, it can't handle servers with more than one SSL certificate per IP. A wildcard certificate probably would work. Android 2.3 (Gingerbread) is the last release and probably the only OS of any significant concern to not support SNI at all. Even XP does with certain browsers. I know that particular phone and to be fair, it's pretty poor. That 240x320 screen surely hurts your eyes. ;) You could probably pick up something better for nothing. That phone can also be rooted quite easily (I've done it) and then flashed with something more recent. --=20 James Le Cuirot (chewi) Gentoo Linux Developer --Sig_/Kaacms/FD1pKmbjG3HybKI7 Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0 iQJ8BAEBCgBmBQJVGDeAXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ1MjhERTZCRDg2OTFBNDM5MUZEQTJFRDQy MUM2MzIxMjlDNkQ3REU0AAoJECHGMhKcbX3kdS4QAJPu1YwrQBhmWoKeMxQmV7v1 Xo7LPGvhMHe+93VeRWZNoOFBfDYFq4g4gUw/7gPYOPBAHm55c2rHP0xDKYLa3ad6 9GFDvDx9vdj6LOCMMcippn/Z7q1rH8GS8bIhcaFQm3/EWZ0tC28G16IGjHdUQfoY IWnLHX0USmPFXQ5iYCK65C2ZECBi8ZgPbNV3pRd8c9jsi9YU0BvPG0zO+xPgGmdF D80/MyCxkvWki1xS0yULldkrYvIyS8CykGLKehPeCzpVuzdkH0tSk6v3T4gLAaG/ q1qy8GnFIAinF4YhVIijHwFvI3k1fNQZWpKZTKNVbaz1+v2IQ0xAQGV57Yz3U8OI WcYdmS9Btk8qDmZXzhOamtFtitNptzOamlHLhH0y0ilzkjs9V/XmvljF2mPb3qcZ KYUQECfHZWeafXMD9VNCDJUoBKcX3ui2arGOGfnXnjJkZQX6AoAiZF98l2L0hip6 d0d+paknCiftp5bDPwPLG49ZTJZhFqGKbkV4yFJoI0KdS+6Y4MP3HGWVd+9r8oNL MP/KgSf/bq8eND+YJQ1rw7PAEZgocxdNPDz7y02OiWy9xLXDPoaxY1mG7Heud+3x OR1p5GHnTw2nGB9LiPikYjvndQz1TF1XWu3lYqzwS0H8g7RLyMsOw4i65Htlg/Fl NBgSlsZ1MFVks2yje6xk =QStx -----END PGP SIGNATURE----- --Sig_/Kaacms/FD1pKmbjG3HybKI7--