Re: [Discuss] [BLU/Officers] update instructions for key signing

2018-09-19 Thread Bill Ricker
On Tue, Sep 18, 2018 at 10:02 AM Derek Atkins wrote: > Bill Ricker writes: > > > (b) closed intranet (no BYOD allowed) where one IT org controls both the > > desktops and the webservers, and you install the Corp private selfsigned > CA > > key into IT release of IE/Edge, FF, Chrome. > > The

Re: [Discuss] [BLU/Officers] update instructions for key signing

2018-09-18 Thread Derek Atkins
Bill Ricker writes: > (b) closed intranet (no BYOD allowed) where one IT org controls both the > desktops and the webservers, and you install the Corp private selfsigned CA > key into IT release of IE/Edge, FF, Chrome. The downside of this latter approach is that the IT org can then sign certs

Re: [Discuss] [BLU/Officers] update instructions for key signing

2018-09-17 Thread Bill Ricker
On Mon, Sep 17, 2018, 11:27 Dan Ritter wrote: > > Since my browser now flags non-https sites as "Unsecure," I'd like to > know > > how to generate a key to put in my Apache setup which will swing the > > padlocks shut. I know that it won't be "valid" unless I import the key > into > > my

Re: [Discuss] [BLU/Officers] update instructions for key signing

2018-09-17 Thread Dan Ritter
On Mon, Sep 17, 2018 at 11:05:48AM -0400, Bill Horne wrote: > Bill, > > I've got a question about GPG, or actually about PKI in general. > > Since my browser now flags non-https sites as "Unsecure," I'd like to know > how to generate a key to put in my Apache setup which will swing the >

Re: [Discuss] [BLU/Officers] update instructions for key signing

2018-09-17 Thread Bill Horne
Bill, I've got a question about GPG, or actually about PKI in general. Since my browser now flags non-https sites as "Unsecure," I'd like to know how to generate a key to put in my Apache setup which will swing the padlocks shut. I know that it won't be "valid" unless I import the key into