Re: security-tracker now on https?

2013-05-24 Thread Florian Weimer
* Stephen Gran: This one time, at band camp, Florian Weimer said: * Peter Palfrader: The solution I'm favouring right now is to get a single *.debian.org wildcard from the cartell and spread it far and wide. The contract terms usually do not allow this. We could ask StartSSL or some

Re: security-tracker now on https?

2013-05-24 Thread Martin Zobel-Helas
Hi, On Fri May 24, 2013 at 20:09:57 +0200, Florian Weimer wrote: * Stephen Gran: This one time, at band camp, Florian Weimer said: * Peter Palfrader: The solution I'm favouring right now is to get a single *.debian.org wildcard from the cartell and spread it far and wide.

Re: security-tracker now on https?

2013-05-24 Thread Florian Weimer
* Martin Zobel-Helas: No, wildcards certificates are generally only licensed for installation on a single server. http://www.digicert.com/wildcard-ssl-certificates.htm And every DigiCert wildcard certificate comes with an unlimited server license, so you only pay once—whether you have one

Re: security-tracker now on https?

2013-05-24 Thread Martin Zobel-Helas
Hi, On Fri May 24, 2013 at 21:42:27 +0200, Florian Weimer wrote: * Martin Zobel-Helas: No, wildcards certificates are generally only licensed for installation on a single server. http://www.digicert.com/wildcard-ssl-certificates.htm And every DigiCert wildcard certificate comes

Re: security-tracker now on https?

2013-05-21 Thread Stephen Gran
Hi, This one time, at band camp, Florian Weimer said: * Peter Palfrader: The solution I'm favouring right now is to get a single *.debian.org wildcard from the cartell and spread it far and wide. The contract terms usually do not allow this. We could ask StartSSL or some other CA if

Re: security-tracker now on https?

2013-05-19 Thread Florian Weimer
* Peter Palfrader: The solution I'm favouring right now is to get a single *.debian.org wildcard from the cartell and spread it far and wide. The contract terms usually do not allow this. We could ask StartSSL or some other CA if they would issue certificates to us in a convenient way. --

Re: security-tracker now on https?

2013-05-17 Thread Thijs Kinkhorst
Hi dsa, On Thu, April 4, 2013 11:10, Thijs Kinkhorst wrote: Hi admins, It was noted that the security tracker now blanket redirects to https://security-tracker.debian.org. This is fine of course for us DD's, but it presents a problem for externals using it. The tracker is often used by e.g.

Re: security-tracker now on https?

2013-05-17 Thread Peter Palfrader
On Fri, 17 May 2013, Thijs Kinkhorst wrote: Hi dsa, On Thu, April 4, 2013 11:10, Thijs Kinkhorst wrote: Hi admins, It was noted that the security tracker now blanket redirects to https://security-tracker.debian.org. This is fine of course for us DD's, but it presents a problem for