Hi, In my opinion we should either buy a real certificate (e.g. from startssl.com) - we have some money in the QGIS account for such expenses. It will save us (and especially our users) a lot of headache if we use certificates that are accepted by all browsers. And it doesn't cost a fortune nowadays.
We should probably opt for a wildcard certificate, allowing the use with mutiple servers under the qgis.org domain, e.g. plugins.qgis.org, www.qgis.org, planet.qgis.org, hub.qgis.org, etc. A two year wildcard domain certificate costs 60 US$ at startssl.com: see https://www.startssl.com/?app=39 I purchased certificates from StartSSL and it works fine. On initial registration you have to file copy of your passport and they give you a phone call to ensure that you exist at the address you registered. After that you can issue one or more certificates. Andreas Am 11.10.2012 12:45, schrieb Marco Bernasocchi: > no you got it right, I guess paolo's reasonement was that if you want https > is because you have an account so you should be interested in trusting us. > but i dont agree too much. we should aim for the lowest entry barrier as > possible. > ciao > > Marco Bernasocchi (mobile) > http://opengis.ch > On Oct 11, 2012 5:19 PM, "Matthias Kuhn" <[email protected]> wrote: > >> As far as I can see, key signing parties are to build a web of trust and >> people outside this network will still see a warning in their browser. >> Or did I get something wrong here? >> >> Regards >> >>> well, that's what keysinging parties are for. >>> I think we (at least the PSC) mutually singed our signatures. >>> Otherwise, we can confirm them with other methods, it should be easy >>> these days. >>> All the best. >> >> >> _______________________________________________ >> Qgis-developer mailing list >> [email protected] >> http://lists.osgeo.org/mailman/listinfo/qgis-developer >> > > > > _______________________________________________ > Qgis-developer mailing list > [email protected] > http://lists.osgeo.org/mailman/listinfo/qgis-developer > _______________________________________________ Qgis-developer mailing list [email protected] http://lists.osgeo.org/mailman/listinfo/qgis-developer
