Re: [OT] SSL testing

2015-11-05 Thread Stephen Price
Maybe that rating site is a hacker site and anyone who has run the script is now compromised? On Fri, 6 Nov 2015 at 5:31 AM, Greg Keogh wrote: > I ran this powershell on a win 2012 r2 machine and went from C to A with a >> reboot >> >>

Re: Escrow : anyone been involved in the process?

2015-11-05 Thread Stuart Kinnear
A lawyer is your friend in this case. Escrow should protect both parties, but if it is written by one party the balance will be in their favour. You need a lawyer to ensure that balance is provided and to give you the knowledge of the risks and obligations of what you are entering into. - Stuart

Re: Escrow : anyone been involved in the process?

2015-11-05 Thread Tony Wright
Hi Preet, I would be very wary of entering into that process unless title was kept by you until they paid in full. They mustn't be allowed to use the software in production like environments until they've paid for everything. Escrow sounds to me like they will hold back payment until the software

RE: [OT] SSL testing

2015-11-05 Thread Ken Schaefer
Reminds me of: [cid:image001.jpg@01D11886.43AF47E0] From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Stephen Price Sent: Friday, 6 November 2015 10:44 AM To: ozDotNet Subject: Re: [OT] SSL testing Maybe that rating site is a hacker

RE: Escrow : anyone been involved in the process?

2015-11-05 Thread 罗格雷格博士
Mostly it’ll be because they have some concern about your company’s long term viability. It probably isn’t that they don’t want to pay for it. They just don’t want to have a situation where you disappear and they have no way to continue to work on it. I’ve seen that in a number of contracts.

Re: Escrow : anyone been involved in the process?

2015-11-05 Thread David Richards
I haven't had to deal with the administrative side but I have had to prepare the source code for such things. The biggest hassle is packaging it in a format that is useful. You can't just give them you VS solution or eclipse project. You need to include everything else necessary to successfully

Re: [OT] SSL testing

2015-11-05 Thread Greg Keogh
> > I ran this powershell on a win 2012 r2 machine and went from C to A with a > reboot > > https://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12 > Likewise, my domain went from F to an A with this script. Now I can sleep. It's a worry how many admins probably don't

Escrow : anyone been involved in the process?

2015-11-05 Thread Preet Sangha
One of our customers (UK govt org) has requested that the software we provide is held in escrow. This will be our first product that is going to be escrowed and I've never been involved in the process and was wondering if it's a relatively straightforward process or something we'll need to

Re: Escrow : anyone been involved in the process?

2015-11-05 Thread Greg Harris
Hi Preet, Escrow is normal business practice and it says they are taking the relationship seriously. Yes, get a good legal adviser to give you good advice! Many years ago, I paid many thousands of dollars to get the following agreement written up (which was very poor advice). As I paid

Re: [OT] SSL testing

2015-11-05 Thread mike smith
Button should say "Add" not "check" :) On Fri, Nov 6, 2015 at 12:27 PM, Tom Rutter wrote: > Hackers probably monitor that site for anyone with an F and then they go > after them > > > On Friday, 6 November 2015, Stephen Price > wrote: > >> Maybe

Re: Escrow : anyone been involved in the process?

2015-11-05 Thread Preet Sangha
Thanks everyone. Just as an FYI I'm no longer a freelancer and am now working for a company. It's just the administrative side of things that have fallen into my lap, and not the legal side (atm)! Luckily we're moving to a new TFS based system so most of the admin side of the code preparation is

Re: Escrow : anyone been involved in the process?

2015-11-05 Thread Steven Parish
Hi Preet, Have a look at http://www.ironmountain.com/ - one of our developer partners in the US use them for their escrow and we were potentially requiring an escrow for our software so I made contact with them for pricing etc They take care of looking after copies of the software in their vaults

Re: [OT] SSL testing

2015-11-05 Thread Greg Wood
Great site to check SSL certs. Thanks! I ran this powershell on a win 2012 r2 machine and went from C to A with a reboot https://www.hass.de/content/setup-your-iis-ssl-perfect-forward-secrecy-and-tls-12 On Thu, Nov 5, 2015 at 3:54 PM, Tom Rutter wrote: > Further to my