Re: [Openstack] Do we need SSL on nova-api ports?

[Richard Hartmann]

On Tue, May 3, 2011 at 08:09, Dirk-Willem van Gulik
dirk-willem.van.gu...@bbc.co.uk wrote:

 a)      Make SSL only the default (ideally with client cert on as well).

Sounds good to me.


 b)      Postulate that one port lower there is an optional HTTP port (OFF, or 
 tied to localhost).

The IETF _strongly_ prefers STARTTLS over separate TLS/non-TLS ports.
If you ever want to get an IANA assignment, you are pretty much
required to support STARTTLS unless you are working with legacy
protocols.


Using STARTTLS and requiring TLS by default seems like a good option
for the medium term, to me.


Richard

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Creating a forum

[Richard Hartmann]

On Tue, May 3, 2011 at 11:24, Thierry Carrez thie...@openstack.org wrote:

 A forum is almost always the wrong solution when we talk about a
 developer/technical subject. In my experience it always ended up
 fragmenting the community between developers (who don't read the forums)
 and users (who don't read the rest).

Agreed. I don't know of any technical forums that are really worth visiting.


 The solution for your problem is not a forum. It's a stackexchange-type
 site. Then questions can be edited, de-duplicated and the good answer
 wins, with a karma-based meritocracy that ensures self-administration.

As weird as this may be, karma-based systems seem to be rather
effective as gathering karma becomes a goal in and as of itself. As
long as that improves the overall experience, there is nothing wrong
with this, though.


 So my suggestion is:
 Set up a stackexchange-type site, drop LP Answers.

Alternatively, stackexchange itself could be used. Personally, I don't
care either way about the implementation; the underlying concept are
what counts.


Richard

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp