Re: https everywhere update - dlang.org gets an "A" now!

2015-12-03 Thread Jacob Carlborg via Digitalmars-d-announce

On 2015-12-04 02:38, Brad Anderson wrote:


It's unfortunate it didn't come a bit sooner because now the NSA
knows I read the entire DUB JSON thread, much to my shame.


You can expect a bill for "Wasting Time" in the mail anytime soon now :)

--
/Jacob Carlborg


Re: Release D 2.069.2

2015-12-03 Thread Ilya via Digitalmars-d-announce

On Thursday, 3 December 2015 at 03:36:10 UTC, Martin Nowak wrote:

Glad to announce D 2.069.2.

http://dlang.org/download.html

This point release fixes a few issues over 2.069.1, see the 
changelog for more details.


http://dlang.org/changelog/2.069.2.html

-Martin


I am planing to open voting on ndslice package next week. Hope to 
get it in 2.070


Re: https everywhere update - dlang.org gets an "A" now!

2015-12-03 Thread Brad Anderson via Digitalmars-d-announce
On Wednesday, 2 December 2015 at 22:17:20 UTC, Walter Bright 
wrote:

https://www.ssllabs.com/ssltest/analyze.html?d=dlang.org=on

Dlang.org gets an "A" now! Thanks to Jan Knepper's efforts.


Nice work by Jan. I know how big of a hassle things like this can 
be so taking the time to actually do it is much appreciated.


On a related note, Let's Encrypt hit public beta today[1]. With 
that I think we should be able to get all of the official 
infrastructure on TLS now. It's unfortunate it didn't come a bit 
sooner because now the NSA knows I read the entire DUB JSON 
thread, much to my shame.


1. https://letsencrypt.org/2015/12/03/entering-public-beta.html


Re: https everywhere update - dlang.org gets an "A" now!

2015-12-03 Thread David Nadlinger via Digitalmars-d-announce
On Wednesday, 2 December 2015 at 22:17:20 UTC, Walter Bright 
wrote:

https://www.ssllabs.com/ssltest/analyze.html?d=dlang.org=on

Dlang.org gets an "A" now! Thanks to Jan Knepper's efforts.


Thanks!

Also displays as https in Chrome now.

 — David


Re: https everywhere update - dlang.org gets an "A" now!

2015-12-03 Thread Brad Roberts via Digitalmars-d-announce

On 12/3/15 5:38 PM, Brad Anderson via Digitalmars-d-announce wrote:

On Wednesday, 2 December 2015 at 22:17:20 UTC, Walter Bright wrote:

https://www.ssllabs.com/ssltest/analyze.html?d=dlang.org=on

Dlang.org gets an "A" now! Thanks to Jan Knepper's efforts.


Nice work by Jan. I know how big of a hassle things like this can be so taking 
the time to actually
do it is much appreciated.

On a related note, Let's Encrypt hit public beta today[1]. With that I think we 
should be able to
get all of the official infrastructure on TLS now. It's unfortunate it didn't 
come a bit sooner
because now the NSA knows I read the entire DUB JSON thread, much to my shame.

1. https://letsencrypt.org/2015/12/03/entering-public-beta.html


I'm glad that letsencrypt is out there doing the publicity, but getting and using ssl certs has been 
free via startssl for several years now.  What this new group is doing is the PR and marketing to 
get people to do it, of course under their own umbrella rather than another company's.


- Brad


Re: https everywhere update - dlang.org gets an "A" now!

2015-12-03 Thread David Nadlinger via Digitalmars-d-announce

On Friday, 4 December 2015 at 02:29:52 UTC, Brad Roberts wrote:
I'm glad that letsencrypt is out there doing the publicity, but 
getting and using ssl certs has been free via startssl for 
several years now.  What this new group is doing is the PR and 
marketing to get people to do it, of course under their own 
umbrella rather than another company's.


The free StartSSL thing was also nigh-unusable – when I gave it a 
try, their in-browser CSR gen thing broke on whatever recent 
version of Firefox I was using, which left me with no cert, but 
them claiming I had exhausted their offer. They also have this 
weird thing where they offer "one host name plus domain" only, 
and charge users for revoking their cert (!).


 — David