Re: SSL on gnupg.org

2013-09-09 Thread Pete Stephenson
On Mon, Sep 9, 2013 at 3:19 PM, Werner Koch wrote: > Due to public demand I enabled https for www.gnupg.org on v4 and v6. IT > is a 2048 bit CaCert certificate, so you need to install the cacert root > certificate. Excellent. > Note also that recent Mozilla browsers tell you in the certificate

Re: SSL on gnupg.org

2013-09-09 Thread Werner Koch
On Mon, 9 Sep 2013 04:06, ghostba...@gmail.com said: > Are there any chances that gnupg.org could use SSL? I have seen some Due to public demand I enabled https for www.gnupg.org on v4 and v6. IT is a 2048 bit CaCert certificate, so you need to install the cacert root certificate. Note also th

Re: SSL on gnupg.org

2013-09-09 Thread Axel Braun
Am Montag, 9. September 2013, 12:54:49 schrieb Peter Lebbing: > If there is /an/ organization that can spoof the authenticity of an SSL > website, it'll be the NSA. I will eat my hat[1] if they don't have access to > a few certificate authorities. > > If you want to verify authenticity of a downl

Re: SSL on gnupg.org

2013-09-09 Thread Nils Faerber
Am 09.09.2013 12:54, schrieb Peter Lebbing: > [1] Luckily, the washing label says "AZO free". I have no idea what that is, > though. OT: AZO colours make up the majority of artificial colours used for all kinds of stuff. They are known to have negative side effects on their own especially on speci

Re: SSL on gnupg.org

2013-09-09 Thread Peter Lebbing
On 09/09/13 04:06, Jose Luis Rivas wrote: > I have seen some worrisome about downloading stuff from a site without a > proper SSL certificate, specially nowadays with the NSA issues which > include them in the middle of the internet pipes. SSL is precisely /not/ the technology to use to escape th

SSL on gnupg.org

2013-09-09 Thread Jose Luis Rivas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello, Are there any chances that gnupg.org could use SSL? I have seen some worrisome about downloading stuff from a site without a proper SSL certificate, specially nowadays with the NSA issues which include them in the middle of the internet pipes