nanog mailing list archives

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Tue, 13 Sep 2011 22:26:37 -0400

On Tue, Sep 13, 2011 at 11:22 AM, Michiel Klaver <michiel () klaver it> wrote:
At 22-07-28164 20:59, Tei wrote:

*a random php programmer shows*

He, I just want to self-sign my CERT's and remove the ugly warning that
browsers shows. I don't want to pay 1000$ a year, or 1$ a year for that. I
just don't want to use cleartext for internet data transfer.  HTTP is like
telnet, and HTTPS is like ssh. But with ssh is just can connect, with
browsers theres this ugly warning and "fuck you, self-signed certificate"
from the browsers.  Please make the pain stop!.

--Tei


No need for (financial) pain, there are free of charge ssl certificates
available, see for example:

http://www.startssl.com/?app=1

eddy stopped issuing

http://www.cacert.org/

these I hadn't seen... or I had and promptly forgotten about them
since they don't get included in any browser/app/OS :(

Affirmtrust is supposed to start issuing certs 'soon' though, free.

-chris


Current thread: