[Systems] certificates / SNI, SSO / passwords

[Luke Faraone]

On 08/29/2010 03:18 PM, Sascha Silbe wrote:
> Excerpts from Luke Faraone's message of Sun Aug 29 20:50:14 +0200 2010:
>> On Aug 28, 2010, at 6:35, Sascha Silbe <sascha-ml-reply-to-2010-2 at silbe.org> wrote:
>>> But from the FAQ I gather that we would still need a manual (= paid-for)
>>> verification for non-SL domains as somebody else owns the domains:
>>
>> Automated (free) verification can occur if we are the Registrar, Technical, or Administrative email address listed in the WHOIS record, or if we have control over the "hostmaster" or "postmaster" email addresses. (hostmaster goes to a private RT queue, which is how I verified "ownership" of sl.o despite Bernie purchasing the domain)
> 
> Technically we can, but as I read the FAQ they will revoke our
> certificates as soon as they notice what we're doing.
> Of course I'd like to be contradicted by an explicit clarification
> by StartCom. :)

They allow it, but the resulting cert will list "Sugar Labs" as the
Organization. See attached email for details.

-- 
╒═════════════════════════════════════════════════════════════════╕
│Luke Faraone                          ╭Debian / Ubuntu Developer╮│
│http://luke.faraone.cc                ╰Sugar Labs, Systems Admin╯│
│PGP: 5189 2A7D 16D0 49BB 046B  DC77 9732 5DD8 F9FD D506          │
╘═════════════════════════════════════════════════════════════════╛
-------------- next part --------------
An embedded message was scrubbed...
From: "StartCom CertMaster (Eddy Nigg)" <certmaster at startcom.org>
Subject: Re: Class 2 validation and domains owned by others
Date: Mon, 30 Aug 2010 03:10:24 +0300
Size: 17478
Url: http://lists.sugarlabs.org/private/systems/attachments/20100829/900dc1f9/attachment-0001.eml 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
Url : http://lists.sugarlabs.org/private/systems/attachments/20100829/900dc1f9/attachment-0001.pgp