[fossil-users] Why the certificate on fossil-scm.org is invalid?

2011-09-26 Thread Remigiusz Modrzejewski
Hi,

I'm wondering: why does fossil-scm.org use invalid certificate? This is pretty 
bad in times when valid certificates are given for free [1]. Is there some 
technical problem with that? I guess that not having to think if someone is 
sniffing my password, every time I'm out of home, may be worth the hassle...

[1] - http://www.startssl.com/?app=33

Kind regards,
Remigiusz Modrzejewski



___
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users


Re: [fossil-users] Why the certificate on fossil-scm.org is invalid?

2011-09-26 Thread Remigiusz Modrzejewski

On Sep 26, 2011, at 11:39 PM, Joshua Paine wrote:

 having to think if someone is sniffing my password, every time I'm
 out of home
 
 If you're using machines you don't control, I'd say it's much more likely 
 that there's something nefarious logging activity on the machine than 
 listening on the wire. (Of course, it seems governments *do* spend a fair bit 
 of effort listening on the wires, but they're not likely to be interested in 
 your fossil password. Make sure it's not more valuable than it needs to be by 
 not using the same password for more than one thing!)

Actually I'm sometimes using machines that I do control in a way, but never 
really setup - usually by means of live cd. On the other hand I'm working in an 
environment where we have people actively doing network security research. I 
think their ethics can be trusted, but still feel a bit uncomfortable every 
time I see a certificate warning.

Kind regards,
Remigiusz Modrzejewski
___
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users