Re: [Savannah-help-public] missing SSL cert from savannah site

[Jon Grant]

2009/8/28 Sylvain Beucler <address@hidden>:
> On Fri, Aug 28, 2009 at 12:23:33PM +0100, Jon Grant wrote:
>> Hi Sylvian, thanks for your reply.
>>
>> 2009/8/28 Sylvain Beucler <address@hidden>:
>> [..]
>> > The certificate is valid.
>> >
>> > As written on the homepage:
>> >
>> >  Our https certificate is signed by the CAcert <http://www.cacert.org/>
>> >  authority, which you can import <http://savannah.gnu.org/tls/>.
>>
>> CAcert is not shipped with Firefox or IE. Unles you can convince them
>> to include the CAcert master signature its a loosing argument..
>
> That's in progress.

It's been in progress since 2005 when I last raised it. I dont expect
the problem to be resolved in the next 3yrs. meanwhile free software
looses out.

>> No user I have ever met has installed a CAcert. Therefore every new
>> user who comes to your site will see this error, and most of them will
>> simply close the window, never to return.
>
> That only happens if you create an account, and with the SSL option
> on.
>
>> Why not switch to an official SSL cert? I'll even pay for it.
>
> Because:
> - we support CAcert
> - we don't want to be dragged into (money-based) over-certification

I support CAcert too. should free software loose out in the mean time though?

Jon