[gentoo-dev] CA-certified SSL

[Dirkjan Ochtman <djc@gentoo.org>]

Hi,

IIRC, we currently don't have CA-certified SSL certificates on Gentoo
properties because the infrastructure people who handle that kind of
stuff really dislike giving up their personal information to a
corporation like a CA. Would it be possible to break that logjam by
volunteering for the job of requesting the certificates?

I think it's really quite silly that we keep inconveniencing ourselves
and our user by not having proper certificates that get recognized by
all the major browsers, preferably wildcard variants (particularly for
Bugzilla attachments).

I'd be happy to handle the certificates and renew them every time when
needed, passing them on to infra staff via a channel they deem secure
enough, although it would be nice if someone else can provide me with
funds (e.g. the Trust/Foundation?).

Cheers,

Dirkjan