<html><head></head><body>Following the thread, it seems like DV solves the immediate problem. <br>
<br>
Given the limited time and energy available to SAC, and the possibility of migrating to something like LetsEncrypt later, I'd be inclined to leave it at that, rather than burn those resources refunding and reworking the certificate.<br>
<br>
--- Harrison<br>
<br>
<br>
<br>
<br><br><div class="gmail_quote">On May 2, 2016 11:47:28 PM GMT+08:00, Alex M <tech_dev@wildintellect.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">On 05/02/2016 11:16 AM, Sandro Santilli wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> On Mon, May 02, 2016 at 09:57:48AM -0400, Alex M wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> On 05/02/2016 09:51 AM, Sandro Santilli wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;"> On Mon, May 02, 2016 at 09:33:34AM -0400, Alex M wrote:<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #fcaf3e; padding-left: 1ex;"> Note to those suggesting<br /> letsencrypt, that too would only be a DV cert.<br /></blockquote><br /> Am I reading it correctly that <a href="https://wikipedia.org">https://wikipedia.org</a><br /> and <a href="https://fsf.org">https://fsf.org</a> are also using
a DV
cert ?<br /><br /> My browser reports (upon asking for more information):<br /><br /> "This website does not supply ownership information."<br /></blockquote></blockquote> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> It's not the Ownership info, it's the Organization (O) line, right after<br /> the common name. That's the only difference I've found.<br /></blockquote> <br /> My current browser (Iceweasel 38.7.0) doesn't show an Organization<br /> line for the SSL certificate. The only difference I see between<br /> the (say) paypal or wikipedia account is the "ownership information".<br /> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> I'll also note, it's harder to hijack the account, since even when<br /> logging in you basically can't do anything on Comodo (our old cert) and<br /> I've been going back and forth with t
hem
about updating the contact<br /> email address, which requires emailing from the current account to a<br /> specific address on their side requesting the change.<br /><br /> Since we don't do an $ transactions, I can't really say if it's worth it<br /> or not.<br /></blockquote> <br /> I guess it depends on priorities and funds availability.<br /> I'd like to see the disk space fixed, for example, and newer<br /> machines to host newer services.<br /> <br /></blockquote><br />This decision in no way impacts our ability to buy a new machine (next<br />year, we just bought one last year). As for disk space, we actually have<br />the space, just a technical thing that we need to allocate more where<br />it's needed.<br /><br />We're also talking about ~$500 difference, but 2 additional years.<br />It would however incur a time cost, of dealing with the refund,<br />purchase, and installation of another cert.<br /><br />Thanks,<br />Alex<br /><hr /><br />Sac mailing list<br
/>Sac@lists.osgeo.org<br /><a href="http://lists.osgeo.org/mailman/listinfo/sac">http://lists.osgeo.org/mailman/listinfo/sac</a></pre></blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>