[Freedombox-discuss] authenticating https clients through Monkeysphere

2014-03-27 Thread Clint Adams
Someone asked me to explain how to set up your own instance of Apache using MSVA, so here goes: 0a) Make or co-opt a user to run MSVA on a fixed port. I was doing this with runit, but systemd turns out to be far nicer, so there's an example config[0] to use with a "wwwmsva" user.

Re: [Freedombox-discuss] Establishing Communicationbetween Freedomboxes

2011-07-07 Thread Clint Adams
On Thu, Jul 07, 2011 at 02:33:37PM -0700, Tony Godshall wrote: > Is Tor centralized this way? The Tor directory authorities are centralized, but the effect of compromising a DNS root server is probably worse than compromising a Tor directory authority. If all the Tor directory authorities are bad

Re: [Freedombox-discuss] FOAF+SSL concerns

2011-06-23 Thread Clint Adams
On Thu, Jun 23, 2011 at 01:02:38PM -0700, Erik Harmon wrote: > I wanted to bring this up and see if the group has anything to say on this. You might want to go back and read the mailing list threads discussing WebID/FOAF+SSL's security failings. ___ Fre

Re: [Freedombox-discuss] the FreedomBox 'bump' challenge

2011-06-15 Thread Clint Adams
On Wed, Jun 15, 2011 at 02:56:10PM -0700, Stefano Maffulli wrote: > If I understand it correctly, it's part of the standard > > http://www.ietf.org/rfc/rfc2426.txt It has KEY, which is supposed to contain the entire certificate, which is, as other people have said, highly impractical in a QR cod

Re: [Freedombox-discuss] the FreedomBox 'bump' challenge

2011-06-15 Thread Clint Adams
On Wed, Jun 15, 2011 at 11:00:19AM -0400, The Doctor wrote: > I've had a lot of success with putting my PGP key ID and fingerprint > into my Vcards that are then turn into QRcodes, though. Which fields do you use for that? ___ Freedombox-discuss mailing

Re: [Freedombox-discuss] the FreedomBox 'bump' challenge

2011-06-14 Thread Clint Adams
On Mon, Jun 13, 2011 at 09:30:10PM -0700, Stefano Maffulli wrote: > One possible scenario is the following: User Jane meets her friend Ken, > they 'bump' their phones and by doing so they exchange not only their > private information (vcard, GPG keys) but also establish a high degree > of digital i

Re: [Freedombox-discuss] Tonika

2011-05-25 Thread Clint Adams
On Tue, May 17, 2011 at 12:14:31PM +0100, Matt Zimmerman wrote: > I'm not sure what its current status is, but I came across it recently and > thought it seemed relevant for this project. Seems to require gomake to build. ___ Freedombox-discuss mailing

Re: [Freedombox-discuss] Where is there an explanation of freedombox that anyone willing to read it can understand it without previous knowledge of the related jargon.

2011-05-25 Thread Clint Adams
On Tue, May 17, 2011 at 01:27:47PM -0500, John Goerzen wrote: > A related question: I want to help. None of these pages are > answering the question: where's the code? So far the only think I'm aware of being written specifically for the FreedomBox is Plinth[0], though I think that things like bo

Re: [Freedombox-discuss] Distributed naming, again

2011-05-17 Thread Clint Adams
On Mon, May 16, 2011 at 10:00:58PM -0700, Lee Fisher wrote: > 1) FB defined some profiles/milestones, specifically, vCurrent that > is achievable with current/working/proven open source software, and > vNext that has discussions about undeveloped/unproven neat ideas. Or > some other project split w

[Freedombox-discuss] Distributed naming, again

2011-05-16 Thread Clint Adams
I am going to anger Jonas by discussing something that interests me, and even though UX is the very most important thing about the FreedomBox project, it is only a small part of the text below. A group of us got together recently to discuss the state of distributed naming technology. We talked ab

[Freedombox-discuss] three Dreamplug issues [was: Hardware platforms?]

2011-05-08 Thread Clint Adams
On Sun, May 08, 2011 at 09:19:41AM +0800, Sandy Harris wrote: > Our main target is plug computers and the ideal > target something like Dreamplug: > http://www.globalscaletechnologies.com/c-5-dreamplugs.aspx While I agree that "something like the Dreamplug" is the right way to go, the Dreamplug it

Re: [Freedombox-discuss] In-the-cloud infrastructure and business involvement (was: distributed DNS)

2011-03-15 Thread Clint Adams
On Tue, Mar 15, 2011 at 03:27:11PM +, Bjarni RĂșnar Einarsson wrote: > Can that be done at all? Or should we assume that any infrastructure > required by the FreedomBoxes will be managed and owned and run by the > foundation? Deciding whether the project as a whole is business hostile or > not

Re: [Freedombox-discuss] FOAF developers taking FreedomBox into their equation

2011-03-10 Thread Clint Adams
On Thu, Mar 10, 2011 at 01:51:48PM +0100, Henry Story wrote: > This is the equivalent in PGP land of loosing control of your private key. > What do you do then? I think it is more the equivalent of losing control over a uid. In PGP-land I would merely revoke that uid from my key, and publish the

Re: [Freedombox-discuss] FOAF developers taking FreedomBox into their equation

2011-03-09 Thread Clint Adams
On Thu, Mar 10, 2011 at 12:11:01AM +0100, Melvin Carvalho wrote: > > WebID use SSL certificates, but do not require _centralized_ certificate > > authorities, Actually, due to requiring an unusual additional hint, some > > centralized CA autorities including CAcert.org cannot currently provide > >

Re: [Freedombox-discuss] FOAF developers taking FreedomBox into their equation

2011-03-09 Thread Clint Adams
On Wed, Mar 09, 2011 at 09:09:25PM +0100, Henry Story wrote: > I am also currently chairing the WebID incubator group at the W3C, so if > you have WebID questions don't hesitate to ping me, or join the W3C mailing > list and ping there. I hope that in the long run we are going to want to rid

Re: [Freedombox-discuss] Confused about this project

2011-03-04 Thread Clint Adams
On Fri, Mar 04, 2011 at 03:40:24PM -0600, Anthony Papillion wrote: > When I joined the list about a week and a half ago, I thought that the > goal of the project was to create a Freedom Box based on a pluggable > computer like the SheevaPlug or PogoPlug. From what I read, the hardware > platform ha

Re: [Freedombox-discuss] Introducing myself and netsukuku

2011-03-04 Thread Clint Adams
[setting MFT to netsukuku list] On Sat, Feb 26, 2011 at 11:42:51PM +0100, Luca Dionisi wrote: > A port to another language would not be a huge effort per se. > The choice on Stackless Python has been made mainly because it offers > the ability to run tasklets, a sort of very light weight threads.

Re: [Freedombox-discuss] my summary of yesterday's Hackfest

2011-03-01 Thread Clint Adams
On Tue, Mar 01, 2011 at 03:51:05PM +, Matt Willsher wrote: > My point is rather: why not just use X.509 keys and certs and why use > GPG/PGP at all? X.509 is multi purpose, well adopted and well trusted. One reason is that OpenPGP peer certification is less messy than X.509 mesh PKI. I believ

Re: [Freedombox-discuss] Kickstarter's initial goal was reached

2011-02-23 Thread Clint Adams
On Wed, Feb 23, 2011 at 04:19:17PM +, Matt Willsher wrote: > are investing a reasonable amount of time even at this stage. What are > we contributing to and is there really any point in discussing the > this device if key decisions have already been made behind currently > closed doors? Or shou