Re: [gentoo-dev] CA-certified SSL

[Dirkjan Ochtman <djc@gentoo.org>]

On Tue, Feb 5, 2013 at 7:06 PM, Rich Freeman <rich0@gentoo.org> wrote:
> My knee-jerk reaction is that your browser has a bug.  It thinks that
> it is appropriate to sound alarms for unauthenticated SSL connections
> but not for unauthenticated non-SSL connections.  A workaround is to
> emerge ca-certificates.
>
> That said, I do understand your concerns (my pet peeves with the CA
> infrastructure and modern browsers notwithstanding).

I understand your concerns as well, but I think practicality should
win over purity here.

> I'm sure the trustees would be interested as long as this was aligned
> with infra.  I'd reach out to them first and work out a plan - paying
> for it is likely to not be a big issue (and we've had offers of
> donated certificates as well).

I'm sure some infra people read this list, but I'll CC them here just
to be sure.

Cheers,

Dirkjan