[aur-general] TU dashboard accounts

[Magnus Therning]

Aaron Griffin wrote:
> On Mon, Aug 10, 2009 at 2:03 PM, Magnus Therning<magnus at therning.org> wrote:
>> Aaron Griffin wrote:
>> [..]
>>
>>> It's not invalid, it's self-signed, so there's no certificate authority
>>> stamp-of-approval on it. We had a free year certificate at one point, but
>>> decided not to waste the money for a real certificate if it's only used by
>>> the devs.
>> One option would be getting one from CACert.org.  Of course it won't be
>> worth
>> a lot without putting their root cert in
>> openssl/firefox/konquerer/epiphany/etc...
> 
> We looked into that, but that's not much better than a self signed cert. We
> discussed this at length among the devs, and already made a decision. We're
> well aware of all the options :)

What was the line of reasoning behind "not much better than a self signed
cert"?

/M

-- 
Magnus Therning                        (OpenPGP: 0xAB4DFBA4)
magnus＠therning．org          Jabber: magnus＠therning．org
http://therning.org/magnus         identi.ca|twitter: magthe

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: OpenPGP digital signature
URL: <http://www.archlinux.org/pipermail/aur-general/attachments/20090810/d17c0cd7/attachment.pgp>