[arch-dev-public] DNS and SSL Cert
Two things are coming up here, and I just want to bring this discussion up again. * DNS Our everydns account is going away. According to their site (http://www.everydns.com/) we have 43-ish days to get everything moved off. We have a handful of options, some free, some not. a) https://pointhq.com/ - I use this personally. Maybe not the snappiest DNS servers in the world, but the interface is easy. b) http://reflected.net/ could host our DNS, but we'd need to manually contact people to change things c) Use our registrar (godaddy) d) Other? * SSL Cert Our StartCom cert is expiring. I need to reconfirm my identity with them, but I can get to this as early as tomorrow. Have we had any major issues with using a cert from these people? Now would be the time to switch, if so. Cheers, Aaron
On Mon, Jul 18, 2011 at 3:46 PM, Aaron Griffin <aaronmgriffin@gmail.com> wrote:
Two things are coming up here, and I just want to bring this discussion up again.
* DNS
Our everydns account is going away. According to their site (http://www.everydns.com/) we have 43-ish days to get everything moved off.
We have a handful of options, some free, some not.
a) https://pointhq.com/ - I use this personally. Maybe not the snappiest DNS servers in the world, but the interface is easy. They have distributed nameservers, which is good enough for me. Should we just go with this? Dave/I are willing to manage it as it isn't that much work once we get the initial setup done.
As a side note, I have an AXFR copy of our entire zone from what we currently have in EveryDNS if that helps.
b) http://reflected.net/ could host our DNS, but we'd need to manually contact people to change things c) Use our registrar (godaddy) d) Other?
* SSL Cert
Our StartCom cert is expiring. I need to reconfirm my identity with them, but I can get to this as early as tomorrow. Have we had any major issues with using a cert from these people? Now would be the time to switch, if so. They seem absolutely fine; I'd say stick with them.
-Dan
Am 19.07.2011 01:26, schrieb Dan McGee:
* SSL Cert
Our StartCom cert is expiring. I need to reconfirm my identity with them, but I can get to this as early as tomorrow. Have we had any major issues with using a cert from these people? Now would be the time to switch, if so. They seem absolutely fine; I'd say stick with them.
Agreed, everything is working well.
On 07/18/2011 11:46 PM, Aaron Griffin wrote:
Two things are coming up here, and I just want to bring this discussion up again.
* DNS
Our everydns account is going away. According to their site (http://www.everydns.com/) we have 43-ish days to get everything moved off.
We have a handful of options, some free, some not.
a) https://pointhq.com/ - I use this personally. Maybe not the snappiest DNS servers in the world, but the interface is easy. b) http://reflected.net/ could host our DNS, but we'd need to manually contact people to change things c) Use our registrar (godaddy) d) Other?
what about cachefly deal?
* SSL Cert
Our StartCom cert is expiring. I need to reconfirm my identity with them, but I can get to this as early as tomorrow. Have we had any major issues with using a cert from these people? Now would be the time to switch, if so.
I see that is expiring in 08/12/2012. Is it too early for me and I don't see well?
Cheers, Aaron
-- Ionuț
On Tue, 2011-07-19 at 09:46 +0300, Ionut Biru wrote:
I see that is expiring in 08/12/2012. Is it too early for me and I don't see well?
It's still valid until August next year, so yes, we should just keep it and not renew it yet. This cert was valid for 2 years instead of just one.
On Tue, Jul 19, 2011 at 2:37 AM, Jan de Groot <jan@jgc.homeip.net> wrote:
On Tue, 2011-07-19 at 09:46 +0300, Ionut Biru wrote:
I see that is expiring in 08/12/2012. Is it too early for me and I don't see well?
It's still valid until August next year, so yes, we should just keep it and not renew it yet. This cert was valid for 2 years instead of just one.
Wait... I didn't even make that connection. I just got a renewal email. Stupid people...
On Tue, 19 Jul 2011 10:34:42 -0500, Aaron Griffin wrote:
On Tue, Jul 19, 2011 at 2:37 AM, Jan de Groot <jan@jgc.homeip.net> wrote:
On Tue, 2011-07-19 at 09:46 +0300, Ionut Biru wrote:
I see that is expiring in 08/12/2012. Is it too early for me and I don't see well?
It's still valid until August next year, so yes, we should just keep it and not renew it yet. This cert was valid for 2 years instead of just one.
Wait... I didn't even make that connection. I just got a renewal email.
Stupid people...
I think what happened here is that not the certificate you issued will expire but the identity validation; which is what you actually pay for not the certificate itself. That means from august on you wont be able to create new certs unless you pay the fee and get your identity validated again. But in our case its simple: just revalidate just before our cert is about to expire. Greetings, Pierre -- Pierre Schmitz, https://users.archlinux.de/~pierre
On Tue, Jul 19, 2011 at 1:46 AM, Ionut Biru <ibiru@archlinux.org> wrote:
On 07/18/2011 11:46 PM, Aaron Griffin wrote:
Two things are coming up here, and I just want to bring this discussion up again.
* DNS
Our everydns account is going away. According to their site (http://www.everydns.com/) we have 43-ish days to get everything moved off.
We have a handful of options, some free, some not.
a) https://pointhq.com/ - I use this personally. Maybe not the snappiest DNS servers in the world, but the interface is easy. b) http://reflected.net/ could host our DNS, but we'd need to manually contact people to change things c) Use our registrar (godaddy) d) Other?
what about cachefly deal?
Turns out it wasn't cachefly, but reflected.net, which is related somehow to cachefly....
On 07/19/2011 06:35 PM, Aaron Griffin wrote:
On Tue, Jul 19, 2011 at 1:46 AM, Ionut Biru<ibiru@archlinux.org> wrote:
On 07/18/2011 11:46 PM, Aaron Griffin wrote:
Two things are coming up here, and I just want to bring this discussion up again.
* DNS
Our everydns account is going away. According to their site (http://www.everydns.com/) we have 43-ish days to get everything moved off.
We have a handful of options, some free, some not.
a) https://pointhq.com/ - I use this personally. Maybe not the snappiest DNS servers in the world, but the interface is easy. b) http://reflected.net/ could host our DNS, but we'd need to manually contact people to change things c) Use our registrar (godaddy) d) Other?
what about cachefly deal?
Turns out it wasn't cachefly, but reflected.net, which is related somehow to cachefly....
if they have geolocation then +1 for them. -- Ionuț
participants (6)
-
Aaron Griffin
-
Dan McGee
-
Ionut Biru
-
Jan de Groot
-
Pierre Schmitz
-
Thomas Bächler