You really need a proper signed certificate. The SSL CA racket might be bad, broken & corrupt, but it's the only thing most people currently have that even attempts to add some security to websites, it's better than nothing or self-signed.
Just get a cheap one, or two, they can be bought for under $10/year, I think if you get one for a subdomain it covers the main domain too, just limit the number of subdomains you use & use subdirectories instead to make it cheaper. I'm happy to donate the $10 if that's the holdup.
Problem with namecoin.info certificate [SSL, https]
-
- Posts: 94
- Joined: Sat Mar 29, 2014 2:20 pm
- os: linux
- Location: Sheffield, England
- Contact:
-
- Posts: 94
- Joined: Sat Mar 29, 2014 2:20 pm
- os: linux
- Location: Sheffield, England
- Contact:
Re: Problem with namecoin.info certificate [SSL, https]
So, no reply after a week... is anybody in?
A trusted (by most web browsers) signed certificate is cheap & whatever the problems with it, it's the best (only) system we have that's in common use right now.
Self signed isn't acceptable, it's not just a meaningless warning. Plain http for any website with a login isn't acceptable either. CACert is really not worth the hassle, only works with Chrome, it is a hassle to get & they place restrictions on what can be done with the website.
The best option is a cheap (but paid for, not free!) automatic domain validation certificate, they cost under $10 for a single subdomain & they're issued in minutes. They validate that the server really is the server & you'd need control of a root cert to do a successful mitm attack against it, self signed offers little or no protection against that.
https://www.namecheap.com/security/ssl- ... ation.aspx
$9/year for a single subdomain, or $29/year for up to 100 domains. There may be better offers around, that's just the first one I found. I'll put 6 namecoins towards it.
A trusted (by most web browsers) signed certificate is cheap & whatever the problems with it, it's the best (only) system we have that's in common use right now.
Self signed isn't acceptable, it's not just a meaningless warning. Plain http for any website with a login isn't acceptable either. CACert is really not worth the hassle, only works with Chrome, it is a hassle to get & they place restrictions on what can be done with the website.
The best option is a cheap (but paid for, not free!) automatic domain validation certificate, they cost under $10 for a single subdomain & they're issued in minutes. They validate that the server really is the server & you'd need control of a root cert to do a successful mitm attack against it, self signed offers little or no protection against that.
https://www.namecheap.com/security/ssl- ... ation.aspx
$9/year for a single subdomain, or $29/year for up to 100 domains. There may be better offers around, that's just the first one I found. I'll put 6 namecoins towards it.
Re: Problem with namecoin.info certificate [SSL, https]
We have a valid certificate now.
Re: Problem with namecoin.info certificate [SSL, https]
It was issued by globalsign monday morning. It is not a wildcard cert, however, so it won't cover the forum and wiki.phelix wrote:Great! Any news on the namecoin.org cert?ryanc wrote:We have a valid certificate now.
Re: Problem with namecoin.info certificate [SSL, https]
Hmmm. Should we move the website and leave the others at .info? Awkward. Any chance to upgrade this to a wildcard cert?ryanc wrote:It was issued by globalsign monday morning. It is not a wildcard cert, however, so it won't cover the forum and wiki.phelix wrote:Great! Any news on the namecoin.org cert?ryanc wrote:We have a valid certificate now.
-
- Posts: 94
- Joined: Sat Mar 29, 2014 2:20 pm
- os: linux
- Location: Sheffield, England
- Contact:
Re: Problem with namecoin.info certificate [SSL, https]
https://namecoin.info & https://www.namecoin.info are giving me invalid certificates (old, expired, ca cert). Forum & wiki are OK.
-
- Posts: 2001
- Joined: Tue Jun 05, 2012 6:25 am
- os: linux
Re: Problem with namecoin.info certificate [SSL, https]
Last I heard, Ryan is busy with something for Defcon, which is why the cert isn't dealt with yet. Sorry for the delays.John Kenney wrote:https://namecoin.info & https://www.namecoin.info are giving me invalid certificates (old, expired, ca cert). Forum & wiki are OK.
Re: Problem with namecoin.info certificate [SSL, https]
Bump!John Kenney wrote:https://namecoin.info & https://www.namecoin.info are giving me invalid certificates (old, expired, ca cert). Forum & wiki are OK.