Google's Highly Open Participation Contest - propose your task now!

2007-12-04 Thread Andre Klapper
dobre večer, vincent already blogged[1] about Google's Highly Open Participation Contest[2] (GHOP). it's a contest similar to summer of code, but for high school students and with much smaller tasks in any fields (like doc, code, translation, a11y or whatever). the average amount of time to be spe

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Owen Taylor
On Wed, 2007-12-05 at 00:34 +, Stef Walter wrote: > Owen Taylor wrote: > > If you are connecting on an insecure network (say coffee shop wireless) > > then a https connection to an untrusted certificate is a distinctly weak > > form of security. > > > > It tells you that you have a encrypted

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Stef Walter
Xavier Bestel wrote: > Le mardi 04 décembre 2007 à 14:29 +, Stef Walter a écrit : >> I'd like to propose [1] that we do away with these dialogs in GNOME. In >> my opinion if we cannot verify the certificate, then we should simply >> not show the UI elements that indicate a secure connection. We

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Stef Walter
Owen Taylor wrote: > If you are connecting on an insecure network (say coffee shop wireless) > then a https connection to an untrusted certificate is a distinctly weak > form of security. > > It tells you that you have a encrypted connection to *somebody*. > > - Owen > > (And note that Stef's p

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Stef Walter
Adam Schreiber wrote: > On Dec 4, 2007 9:29 AM, Stef Walter <[EMAIL PROTECTED]> wrote: >> I'd like to propose [1] that we do away with these dialogs in GNOME. In >> my opinion if we cannot verify the certificate, then we should simply >> not show the UI elements that indicate a secure connection. W

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Stef Walter
Owen Taylor wrote: > On Tue, 2007-12-04 at 14:29 +, Stef Walter wrote: >> Dan Winship got me thinking about the "unable to verify identify of this >> certificate" dialogs we see in browsers when using self-signed or >> otherwise unverifiable certificates. >> >> I'd like to propose [1] that we d

Re: gnome-keyring has SSH, X.509 certificate and key support

2007-12-04 Thread Stef Walter
Bastien Nocera wrote: > On Tue, 2007-12-04 at 16:28 +, Stef Walter wrote: >> Bastien Nocera wrote: >>> On Mon, 2007-12-03 at 19:47 +, Stef Walter wrote: However I'm not sure of the correct autovoodoo to remove the soname and libtool la file. The Makefile.am file is here:

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Xavier Bestel
Le mardi 04 décembre 2007 à 14:29 +, Stef Walter a écrit : > Dan Winship got me thinking about the "unable to verify identify of this > certificate" dialogs we see in browsers when using self-signed or > otherwise unverifiable certificates. > > I'm sure others have come to this conclusion: Th

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Owen Taylor
On Tue, 2007-12-04 at 13:45 -0500, Pat Suwalski wrote: > Owen Taylor wrote: > > If you are connecting on an insecure network (say coffee shop wireless) > > then a https connection to an untrusted certificate is a distinctly weak > > form of security. > > > > It tells you that you have a encrypte

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Pat Suwalski
Owen Taylor wrote: > If you are connecting on an insecure network (say coffee shop wireless) > then a https connection to an untrusted certificate is a distinctly weak > form of security. > > It tells you that you have a encrypted connection to *somebody*. That is correct, of course. It is, howe

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Owen Taylor
On Tue, 2007-12-04 at 12:38 -0500, Pat Suwalski wrote: > Murray Cumming wrote: > > On Tue, 2007-12-04 at 12:12 -0500, Adam Schreiber wrote: > >>> Unfortunately, one of the main UI elements that indicate a secure > >>> connection is the https:// URL in the URL bar. Are you proposing to > >>> disgui

Re: gnome-keyring has SSH, X.509 certificate and key support

2007-12-04 Thread Bastien Nocera
On Tue, 2007-12-04 at 17:20 +, Gustavo J. A. M. Carneiro wrote: > On Ter, 2007-12-04 at 16:38 +, Bastien Nocera wrote: > > On Tue, 2007-12-04 at 16:28 +, Stef Walter wrote: > > > Bastien Nocera wrote: > > > > On Mon, 2007-12-03 at 19:47 +, Stef Walter wrote: > > > >> However I'm no

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Pat Suwalski
Murray Cumming wrote: > On Tue, 2007-12-04 at 12:12 -0500, Adam Schreiber wrote: >>> Unfortunately, one of the main UI elements that indicate a secure >>> connection is the https:// URL in the URL bar. Are you proposing to >>> disguise that as well? >> Maybe just not shade it yellow. It will still

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Luis Villa
On Dec 4, 2007 11:35 AM, Owen Taylor <[EMAIL PROTECTED]> wrote: > > On Tue, 2007-12-04 at 14:29 +, Stef Walter wrote: > > Dan Winship got me thinking about the "unable to verify identify of this > > certificate" dialogs we see in browsers when using self-signed or > > otherwise unverifiable cer

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Murray Cumming
On Tue, 2007-12-04 at 12:12 -0500, Adam Schreiber wrote: > > Unfortunately, one of the main UI elements that indicate a secure > > connection is the https:// URL in the URL bar. Are you proposing to > > disguise that as well? > > Maybe just not shade it yellow. It will still be running over ssl >

Re: gnome-keyring has SSH, X.509 certificate and key support

2007-12-04 Thread Gustavo J. A. M. Carneiro
On Ter, 2007-12-04 at 16:38 +, Bastien Nocera wrote: > On Tue, 2007-12-04 at 16:28 +, Stef Walter wrote: > > Bastien Nocera wrote: > > > On Mon, 2007-12-03 at 19:47 +, Stef Walter wrote: > > >> However I'm not sure of the correct autovoodoo to remove the soname and > > >> libtool la fil

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Adam Schreiber
On Dec 4, 2007 11:35 AM, Owen Taylor <[EMAIL PROTECTED]> wrote: > > On Tue, 2007-12-04 at 14:29 +, Stef Walter wrote: > > Dan Winship got me thinking about the "unable to verify identify of this > > certificate" dialogs we see in browsers when using self-signed or > > otherwise unverifiable cer

Re: gnome-keyring has SSH, X.509 certificate and key support

2007-12-04 Thread Bastien Nocera
On Tue, 2007-12-04 at 16:28 +, Stef Walter wrote: > Bastien Nocera wrote: > > On Mon, 2007-12-03 at 19:47 +, Stef Walter wrote: > >> However I'm not sure of the correct autovoodoo to remove the soname and > >> libtool la file. The Makefile.am file is here: > >> > >> http://svn.gnome.org/vi

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Owen Taylor
On Tue, 2007-12-04 at 14:29 +, Stef Walter wrote: > Dan Winship got me thinking about the "unable to verify identify of this > certificate" dialogs we see in browsers when using self-signed or > otherwise unverifiable certificates. > > I'm sure others have come to this conclusion: These are s

Re: gnome-keyring has SSH, X.509 certificate and key support

2007-12-04 Thread Stef Walter
Bastien Nocera wrote: > On Mon, 2007-12-03 at 19:47 +, Stef Walter wrote: >> However I'm not sure of the correct autovoodoo to remove the soname and >> libtool la file. The Makefile.am file is here: >> >> http://svn.gnome.org/viewvc/gnome-keyring/trunk/pkcs11/Makefile.am?view=markup > > Remove

Re: About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Adam Schreiber
On Dec 4, 2007 9:29 AM, Stef Walter <[EMAIL PROTECTED]> wrote: > I'd like to propose [1] that we do away with these dialogs in GNOME. In > my opinion if we cannot verify the certificate, then we should simply > not show the UI elements that indicate a secure connection. We should > just act as if t

About SSL "Trick or Treat" Dialogs

2007-12-04 Thread Stef Walter
Dan Winship got me thinking about the "unable to verify identify of this certificate" dialogs we see in browsers when using self-signed or otherwise unverifiable certificates. I'm sure others have come to this conclusion: These are some of the most useless dialogs that exist, a major cop out. They