Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread Daniel Micay
On 02/04/14 06:10 PM, David C. Rankin wrote: > On 04/02/2014 04:44 AM, Neal Oakey wrote: >> What do you think? Imho we should keep follow Debian here. Other >>> solutions would be to patch it back in or ship a separate optional >>> package; though that might be impossible for nss. >>> >>> Greetings

Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread Kyle
I really do hope the manpower becomes available to complete the code cleanup and other things necessary to bring CAcert into the major browsers and back into the Arch certificate bundle. From looking at the options, CAcert is, as far as I know, the only truly free certificate authority available an

Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread David C. Rankin
On 04/02/2014 04:44 AM, Neal Oakey wrote: > What do you think? Imho we should keep follow Debian here. Other >> solutions would be to patch it back in or ship a separate optional >> package; though that might be impossible for nss. >> >> Greetings, >> >> Pierre >> I usually agree with Pierre, but

Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread Neal Oakey
Hi, here you have some more detailed informations (see quote). Greetings, Neal Am 02.04.2014 23:40, schrieb Benny Baumann: > Hi, > > Am 02.04.2014 18:33, schrieb Neal Oakey: >> mit freundlichen Gruessen / best regards >> Neal Thomas Oakey >> CAcert Assurer, CAcert Event Organisation >> CAcert.or

Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread Nowaker
It's becoming clearer that CAcert isn't going to be passing a third party audit any time soon. Our only view into it is the open-source code they've made available, and messy wiki documentation. The quality of the code is not exactly comforting - whoever wrote most of it didn't seem to be aware of

Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread Daniel Micay
On 02/04/14 11:31 AM, Neal Oakey wrote: > Hi, > > well until now all of this wasn't a problem, so why has it now become one? It's becoming clearer that CAcert isn't going to be passing a third party audit any time soon. Our only view into it is the open-source code they've made available, and mes

Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread Neal Oakey
Hi, well until now all of this wasn't a problem, so why has it now become one? And well if you have a look at startssl, well they may be offering free certs but only single domain and just use the plain "things". * It doesn't allow commercial usage * "only" valid for 1 year * located in I

Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread Kyle
According to Daniel Micay: # Until then, there are plenty of other certificate authorities with free # certificates that are also included in every major browser / operating # system. For example: # # https://www.startssl.com/?app=1 I initially became interested in CAcert not only because of its f

Re: [arch-general] [arch-dev-public] CAcert dropped from certificate bundle

2014-04-02 Thread Daniel Micay
On 02/04/14 05:44 AM, Neal Oakey wrote: > Hi all, > > because I can't send this to the arch-dev-public mailing list I will > send this here: > > In my opinion, only because Debian drops the support for something this > doesn't mean that we should do the same. > > And if you look at the Bugreport