Problem with namecoin.info certificate [SSL, https]

[John Kenney]

You really need a proper signed certificate. The SSL CA racket might be bad, broken & corrupt, but it's the only thing most people currently have that even attempts to add some security to websites, it's better than nothing or self-signed.

Just get a cheap one, or two, they can be bought for under $10/year, I think if you get one for a subdomain it covers the main domain too, just limit the number of subdomains you use & use subdirectories instead to make it cheaper. I'm happy to donate the $10 if that's the holdup.

[John Kenney]

So, no reply after a week... is anybody in?

A trusted (by most web browsers) signed certificate is cheap & whatever the problems with it, it's the best (only) system we have that's in common use right now.

Self signed isn't acceptable, it's not just a meaningless warning. Plain http for any website with a login isn't acceptable either. CACert is really not worth the hassle, only works with Chrome, it is a hassle to get & they place restrictions on what can be done with the website.

The best option is a cheap (but paid for, not free!) automatic domain validation certificate, they cost under $10 for a single subdomain & they're issued in minutes. They validate that the server really is the server & you'd need control of a root cert to do a successful mitm attack against it, self signed offers little or no protection against that.

https://www.namecheap.com/security/ssl- ... ation.aspx

$9/year for a single subdomain, or $29/year for up to 100 domains. There may be better offers around, that's just the first one I found. I'll put 6 namecoins towards it.

[ryanc]

We have a valid certificate now.

[phelix]

We have a valid certificate now.

Great! Any news on the namecoin.org cert?

[ryanc]

We have a valid certificate now.

Great! Any news on the namecoin.org cert?

It was issued by globalsign monday morning. It is not a wildcard cert, however, so it won't cover the forum and wiki.

[phelix]

We have a valid certificate now.

Great! Any news on the namecoin.org cert?

It was issued by globalsign monday morning. It is not a wildcard cert, however, so it won't cover the forum and wiki.

Hmmm. Should we move the website and leave the others at .info? Awkward. Any chance to upgrade this to a wildcard cert?

[John Kenney]

https://namecoin.info & https://www.namecoin.info are giving me invalid certificates (old, expired, ca cert). Forum & wiki are OK.

[biolizard89]

https://namecoin.info & https://www.namecoin.info are giving me invalid certificates (old, expired, ca cert). Forum & wiki are OK.

Last I heard, Ryan is busy with something for Defcon, which is why the cert isn't dealt with yet. Sorry for the delays.

[phelix]

https://namecoin.info & https://www.namecoin.info are giving me invalid certificates (old, expired, ca cert). Forum & wiki are OK.

Bump!