Re: [Savannah-help-public] missing SSL cert from savannah site

[Sylvain Beucler]

On Fri, Aug 28, 2009 at 12:23:33PM +0100, Jon Grant wrote:
> Hi Sylvian, thanks for your reply.
> 
> 2009/8/28 Sylvain Beucler <address@hidden>:
> [..]
> > The certificate is valid.
> >
> > As written on the homepage:
> >
> >  Our https certificate is signed by the CAcert <http://www.cacert.org/>
> >  authority, which you can import <http://savannah.gnu.org/tls/>.
> 
> CAcert is not shipped with Firefox or IE. Unles you can convince them
> to include the CAcert master signature its a loosing argument..

That's in progress.

> No user I have ever met has installed a CAcert. Therefore every new
> user who comes to your site will see this error, and most of them will
> simply close the window, never to return.

That only happens if you create an account, and with the SSL option
on.

> Why not switch to an official SSL cert? I'll even pay for it.

Because:
- we support CAcert
- we don't want to be dragged into (money-based) over-certification

-- 
Sylvain