[Imc-communication] Approved propose for ssl certificates for the global indymedia.org sites

Sun Apr 8 12:57:36 PDT 2012

All political issues around startssl aside, Indymedia Linksunten tried to get a cert there, but it turned out they have indymedia.org blacklisted.

x,
l.

On Sun, Apr 08, 2012 at 08:41:08PM +0100, penguin wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi
> 
> How about Start SSL - they do free certs from the looks of things ...
> https://www.startssl.com/
> 
> Cheers
> 
> G
> 
> On Sun 08 Apr 2012 21:31:03 BST, groente [groente at puscii.nl] emailed
> subject: "Re: [Imc-communication] Approved propose for ssl certificates for
>  the global indymedia.org sites" saying ...
> 
> > well, 11quid > e9.35. and quite frankly, i don't believe in any notion of ethics when it comes to reselling ssl-certs.
> > x,
> > l.
> > 
> > On Sun, Apr 08, 2012 at 08:06:56PM +0100, penguin wrote:
> > Thanks L
> > 
> > Well how about gandi.net - who do pretty cheap SSLs and seem to have
> > some vague notion of ethics to their business? Looks like £11 / year -
> > quite a bit cheaper than Comodo (from the link I could find)?
> > 
> > Cheers
> > 
> > G
> > 
> > 
> > On Sun 08 Apr 2012 20:50:59 BST, groente [groente at puscii.nl] emailed
> > subject: "Re: [Imc-communication] Approved propose for ssl certificates for
> >  the global indymedia.org sites" saying ...
> > 
> >>>> cheapssls.com, sslmatrix.com, rapidsslonline.com, there are lots, just search for 'cheap ssl'.
> >>>> as for the wildcards, we had that discussion, but wildcards are pretty expensive, so the break-even point isn't 'till over 10 ten subdomains and, more importantly, it would require all the servers using the same private key. then, if one server gets compromised, all encryption on the entire indymedia.org network is copmromised. not good.
> >>>>
> >>>> x,
> >>>> l.
> >>>>
> >>>> On Sun, Apr 08, 2012 at 07:43:08PM +0100, penguin wrote:
> >>>> Hi
> >>>>
> >>>>>>> As for vendor, Comodo EssentialSSL seems to be the cheapest,
> >>>> Can you provide a link for that. Searching for it, I could only find
> >>>> https://www.instantssl.com/
> >>>> Which is quite a bit more expensive (£42 / $66 E51).
> >>>>
> >>>> And (I'm not an expert) if there are lots of subdomains, might a
> >>>> wildcard cert be a better bet?
> >>>>
> >>>> Cheers
> >>>>
> >>>> G
> >>>>
> >>>> On Sun 08 Apr 2012 20:26:08 BST, groente [groente at puscii.nl] emailed
> >>>> subject: "Re: [Imc-communication] Approved propose for ssl certificates for
> >>>>  the global indymedia.org sites" saying ...
> >>>>
> >>>>>>> As mentioned before, the exact number of certs required is still unsure (some platforms, like irc and www, may require more then one cert), but for now i want to prioritise
> >>>>>>> - lists
> >>>>>>> - irc
> >>>>>>> - docs
> >>>>>>> - www
> >>>>>>> - publish
> >>>>>>> - sos
> >>>>>>> As for vendor, Comodo EssentialSSL seems to be the cheapest, they offer certs for e9.35 per year or 37.35 for 5 years.
> >>>>>>> So 6 * e9.35 = e56.10 would be a good start to get the very basics covered as soon as possible.
> >>>>>>> I'm pretty sure we'll need a few more for technical reasons and there are (probably quite a lot of) global sites that i forgot or didn't prioritise, so it'd be good to have a reasonable yearly budget (say max e250/year?).
> >>>>>>>
> >>>>>>> x,
> >>>>>>> l.
> >>>>>>>
> >>>>>>>
> >>>>>>> On Sun, Apr 08, 2012 at 12:45:24PM -0500, Mike Lehman wrote:
> >>>>>>>> Elisa,
> >>>>>>>> I am copying my reply to the UC IMC Finance list.
> >>>>>>>>
> >>>>>>>> Groente,
> >>>>>>>> Please advise the number of certs to be purchased, cost of each and
> >>>>>>>> the total amount of the request, along with the vendor info. This
> >>>>>>>> needs to be documented on-list so that everyone has the figures now
> >>>>>>>> that the request has been approved. It's possible I didn't see that
> >>>>>>>> being discussed, but for purposes of disbursal, we'll need to
> >>>>>>>> document that here for record-keeping purposes.
> >>>>>>>>
> >>>>>>>> Durl,
> >>>>>>>> I've followed this proposal through the process. It's now been
> >>>>>>>> approved. I am uncertain of the dollar amount, but the proceeds are
> >>>>>>>> to be used to purchase server ssl certificates. After Groente
> >>>>>>>> provides the numbers to the global IMC Finance list and for us, then
> >>>>>>>> you can make arrangements for disbursal off-list.
> >>>>>>>>
> >>>>>>>> I think this covers all the loose ends, but if anyone sees that I've
> >>>>>>>> overlooked anything or has an additional question or concern, please
> >>>>>>>> advise.
> >>>>>>>> Mike Lehman
> >>>>>>>> UC IMC global Finance liaison
> >>>>>>>>
> >>>>>>>> On 4/8/2012 7:01 AM, elisa wrote:
> >>>>>>>>> Hi IMC-Finance,
> >>>>>>>>>
> >>>>>>>>> For those who was following the discussions here and on the
> >>>>>>>>> IMC-Communication, IMC-Tech lists, we have a propose to buy commercial
> >>>>>>>>> ssl certificates for the global indymedia.org sites, that was approved
> >>>>>>>>> since the dead line was april 1st and we didn´t had any opposition to it.
> >>>>>>>>>
> >>>>>>>>> The propose was made by groente from imc nl, thanks groente :)
> >>>>>>>>> http://lists.indymedia.org/pipermail/imc-communication/2012-March/0315-wy.html
> >>>>>>>>>
> >>>>>>>>> On this mail Groente answer some of the questions that Petros have done:
> >>>>>>>>> http://lists.indymedia.org/pipermail/imc-communication/2012-March/0318-1z.html
> >>>>>>>>>
> >>>>>>>>> Mike can you please talk with Groente at puscii.nl to see how is the
> >>>>>>>>> best way to pay this certs?
> >>>>>>>>>
> >>>>>>>>> I have put groente on the copy of this mail.
> >>>>>>>>>
> >>>>>>>>> Abraço,
> >>>>>>>>> Elisa - IMC-Brasil
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> _______________________________________________
> >>>>>>>>> IMC-communication mailing list
> >>>>>>>>> IMC-communication at lists.indymedia.org
> >>>>>>>>> http://lists.indymedia.org/mailman/listinfo/imc-communication
> >>>>>>>>
> >>>>>>> _______________________________________________
> >>>>>>> IMC-communication mailing list
> >>>>>>> IMC-communication at lists.indymedia.org
> >>>>>>> http://lists.indymedia.org/mailman/listinfo/imc-communication
> >>>>
> > _______________________________________________
> > IMC-communication mailing list
> > IMC-communication at lists.indymedia.org
> > http://lists.indymedia.org/mailman/listinfo/imc-communication
> > 
> 
> - -- 
> penguin
> 
> Where's the manual?
> The source code is the manual.
> 
> GPG key: http://tiny.cc/gpg-key
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iQEcBAEBAgAGBQJPgenUAAoJENMF+CPFM1beK5IH/jXO24m1UIekfuZcya8LCgnE
> teiAIX+CG1Mc3kueHiSOCDpPLzG8wa7CnXj2kpEwD6Iv+f1ymO8cCE4sQq3h6HXS
> 4e+g2oW/9H/RQecKA1NX3oY4RTQmsbdol5D7xzl/lKovA8snaNTHHb5BLHVvj/6G
> ggIjPRst1C1OwaP2EVkmXSEJafYO/octe0tk4EPM8E2pQujRg1HfOrqLN2G+DksT
> l6l8GPSe2NbwOInmFdm4c7Mxl6IO/wtY2SzE766OdK/U/qz9zNUwVANEAQJjIAtA
> w6MoGLP42yy6XFh6ZcrQc9izEFaVX4obgO3yQBkbXINdqrM0kyZts8obJJlXCes=
> =FHn2
> -----END PGP SIGNATURE-----