Re: ca-certificates: no more cacert.org certificates?!?
Brian May <brian@microcomaustralia.com.au> writes:
> On 1 April 2014 04:42, Marc Haber <mh+debian-devel@zugschlus.de> wrote:
>> cacert.org is unuseable if you offer your web site to muggles. It's
>> not in the browsers.
> Not sure what you mean. cacert.org is unusable at the moment because it
> isn't included in the browsers. Which is the problem we were discussing
> in this thread.
But nothing Debian does one way or the other is going to get cacert.org's
root certificates into the general end-user browsers. So that's a reality
that we're going to have to continue to live with.
Given that reality, it's not clear to me that cacert.org certificates
really have much of an advantage for most use cases over self-signed
certificates.
Of course, I'm one of those people who believes that web site certificate
signatures as currently implemented, with the level of vetting that's
actually done by commercial CAs in practice, are more of an extortion
racket than a security measure.
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: