Re: [FORGED] Re: SSL Certs for Malicious Websites

2016-05-27 Thread Gervase Markham
On 27/05/16 13:20, Peter Gutmann wrote: > Apart from the lucky CAs who have been given government- > mandated monopolies, would any CA still exist today if there weren't a need to > pay someone to turn off the browser warnings? It depends what alternative configuration-free idiot-proof secure

Re: Job: Is it OK to post a job listing in this forum?

2016-05-27 Thread Peter Kurrasch
I'm opposed to allowing job postings in this forum. The focus should be policy as that is the reason we have gathered here. Job postings generally are intended for people in a particular country ‎with a particular level of experience who are actively seeking or receptive to a new job. Sending

RE: [FORGED] Re: SSL Certs for Malicious Websites

2016-05-27 Thread Peter Gutmann
Ryan Sleevi writes: >This seems both off-topic and not productively addressing the topic at hand. Yeah, maybe it's best taken to another list like cypherpunks or the crypto list. It was intended as an honest, and probably pretty blunt, assessment of the state of HTTPS: It was

Re: Job: Is it OK to post a job listing in this forum?

2016-05-27 Thread Gervase Markham
On 27/05/16 04:09, David E. Ross wrote: > I would have several concerns, mostly about Mozilla's ability to verify > the criteria are met and the effort to do that verification. For > example, how would anyone here verify the following? This is partly why there is an important criterion that jobs