[Freedombox-discuss] CAs and cipher suites for cautious servers like FreedomBox

[Philip Hands]

Eugen Leitl <eugen at leitl.org> writes:

> On Thu, Sep 12, 2013 at 11:43:28AM +0100, Keith wrote:
>> Anyone for setting up a Freedombox CA?
>> This could be added to the freedombox as a trusted CA and usable for
>> freedombox to freedombox TLS only.
>
> A CA appears counterproductive. End users should use 
> self-signed certs, or each Freedombox issue contain
> their own CA.

It seems that the problem you're discussing is the one that that
monkeyshere has already addressed quite nicely:

  http://web.monkeysphere.info/

Cheers, Phil.
-- 
|)|  Philip Hands [+44 (0)20 8530 9560]    http://www.hands.com/
|-|  HANDS.COM Ltd.                    http://www.uk.debian.org/
|(|  10 Onslow Gardens, South Woodford, London  E18 1NE  ENGLAND
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20130912/04c80999/attachment.sig>