News for hackers. Stuff that matters.
Re:SSL in Plain English by wildmXranat on Friday September 03, 2010 @07:55AM (#1659257)
Or otherwise about an industry that rakes in huge profits by executing a few command on your .crt

I wonder when or if we will get a chance to see a community signed and trusted SSL certificate provider.

Re:SSL in Plain English by lolipop1 on Friday September 03, 2010 @08:52AM (#1659369)
Not community, but there is http://cert.startcom.org/ .

You can also do your own (OpenSSL has everything you need).

And for a community one, you'd still need a verification mechanism and a protection mechanism for the roots; both of which could be hard to do in a volatile environment. http://www.cacert.org/ Seems to be that, don't think they are included in any browsers by default though (it's not in mine at least).

Re:SSL in Plain English by gxti on Friday September 03, 2010 @11:00AM (#1659779)
http://www.cacert.org/ has been jumping through Mozilla's hoops for years now, and no sign of being accepted. Shame, because they're certainly more secure than the typical "trusted" CA.

EDIT: Looks like CAcert withdrew their application until they get their internal audit out of the way: https://bugzilla.mozilla.org/show_bug.cgi?id=215243#c158