* Peter Palfrader: > The "solution" I'm favouring right now is to get a single *.debian.org > wildcard from the cartell and spread it far and wide. The contract terms usually do not allow this. We could ask StartSSL or some other CA if they would issue certificates to us in a convenient way.