[Qgis-developer] secure qgis.org - SSL certificate

[Andreas Neumann]

Hi,

In my opinion we should either buy a real certificate (e.g. from
startssl.com) - we have some money in the QGIS account for such
expenses. It will save us (and especially our users) a lot of headache
if we use certificates that are accepted by all browsers. And it doesn't
cost a fortune nowadays.

We should probably opt for a wildcard certificate, allowing the use with
mutiple servers under the qgis.org domain, e.g. plugins.qgis.org,
www.qgis.org, planet.qgis.org, hub.qgis.org, etc.

A two year wildcard domain certificate costs 60 US$ at startssl.com: see
https://www.startssl.com/?app=39

I purchased certificates from StartSSL and it works fine. On initial
registration you have to file copy of your passport and they give you a
phone call to ensure that you exist at the address you registered. After
that you can issue one or more certificates.

Andreas

Am 11.10.2012 12:45, schrieb Marco Bernasocchi:
> no you got it right, I guess paolo's reasonement was that if you want https
> is because you have an account so you should be interested in trusting us.
> but i dont agree too much. we should aim for the lowest entry barrier as
> possible.
> ciao
> 
> Marco Bernasocchi (mobile)
> http://opengis.ch
> On Oct 11, 2012 5:19 PM, "Matthias Kuhn" <matthias.kuhn at gmx.ch> wrote:
> 
>> As far as I can see, key signing parties are to build a web of trust and
>> people outside this network will still see a warning in their browser.
>> Or did I get something wrong here?
>>
>> Regards
>>
>>> well, that's what keysinging parties are for.
>>> I think we (at least the PSC) mutually singed our signatures.
>>> Otherwise, we can confirm them with other methods, it should be easy
>>> these days.
>>> All the best.
>>
>>
>> _______________________________________________
>> Qgis-developer mailing list
>> Qgis-developer at lists.osgeo.org
>> http://lists.osgeo.org/mailman/listinfo/qgis-developer
>>
> 
> 
> 
> _______________________________________________
> Qgis-developer mailing list
> Qgis-developer at lists.osgeo.org
> http://lists.osgeo.org/mailman/listinfo/qgis-developer
>