Re: [Geany-Devel] Invalid certificate

2015-10-25 Thread Enrico Tröger
Hi, > some may have already said it, but certificate on https://lists.geany.org > is invalid. I guess the one from Let's encrypt could be used (which now > seems to be trusted)? could you elobarate a bit what exactly you mean by "invalid"? This is a wildcard certificate for *.geany.org and is

Re: [Geany-Devel] Invalid certificate

2015-10-25 Thread Frank Lanitz
Am 25.10.2015 um 13:17 schrieb Arthur Peka: > > some may have already said it, but certificate > on https://lists.geany.org is invalid. I guess the one from Let's > encrypt could be used (which now seems to be trusted)? They did a huge step forward, but AFAIK not yet done. By now we are using

Re: [Geany-Devel] Invalid certificate

2015-10-25 Thread Arthur Peka
In my understanding "invalid" includes "signed by untrusted authority". I'm no security expert, and for me browser reporting an invalid certificate is a red flag - I'll have a hard time figuring out that cacert.org are in fact the "good guys". I believe, this can also turn away some contributors,

Re: [Geany-Devel] Invalid certificate

2015-10-25 Thread Frank Lanitz
Hi, Am 25.10.2015 um 14:41 schrieb Arthur Peka: > In my understanding "invalid" includes "signed by untrusted authority". > I'm no security expert, and for me browser reporting an invalid > certificate is a red flag - I'll have a hard time figuring out > that cacert.org are in

Re: [Geany-Devel] Invalid certificate

2015-10-25 Thread Arthur Peka
Ok, glad to hear that. BR, Artur. On Sun, Oct 25, 2015 at 3:58 PM, Frank Lanitz wrote: > Hi, > > Am 25.10.2015 um 14:41 schrieb Arthur Peka: > > In my understanding "invalid" includes "signed by untrusted authority". > > I'm no security expert, and for me browser