Re: [Savannah-users] Savannah's x.509 certificate fingerprints

[Taylor R Campbell]

   Date: Wed, 20 Jun 2007 07:35:45 +0200
   From: Sylvain Beucler <address@hidden>

   On Wed, Jun 20, 2007 at 03:30:04AM +0000, Taylor R Campbell wrote:
   > There are a few HTML errors in that page now (or were there before):
   > 
   > [...]

   Thanks, I fixed them (and a couple others with use of HTML Tidy).

There are still unescaped `<'s on lines 103 and 140.  I can't recall
how they are supposed to interact with <pre>; the W3C's validator just
gives a warning about them.

   > Also, I wonder whether it might be worth mentioning that if the pages
   > are downloaded with `curl', the authenticity of the server can be
   > implicitly checked simply by specifying `ca.crt' with the `--cacert'
   > option; that is, after fetching `ca.crt', one can run `curl --cacert
   > ca.crt -O http://savannah.gnu.org/tls/....crt'.  There may be a
   > similar option for `wget', but I don't know.

   You need to use https :) But well, I think people either already know
   that or use Firefox/Konqueror/etc. to do so.

Ah, I see: the message in italics is, in fact, referring to the other
certificates; I understood it to refer to the whole Savannah web site
under `https'.  Never mind, then, my absent-minded inattentiveness!

Anyway, thanks for the prompt response, and for the Savannah service!