[Freedombox-discuss] Summary from my work before 2013-09-23

[Jonas Smedegaard]

Quoting Petter Reinholdtsen (2013-09-23 22:15:31)
> I've noticed monkeysphere is installed in the current images, but have 
> been unable to understand exactly what it should be used for on the 
> Freedombox.  It seem to be more useful on users laptops?

Just having the package installed does no good, I agree.

A potential use could be for the box to generate self-signed TLS 
certificates for public-facing services, sign them with a host-specific 
PGP key, and publish them to key servers.  That allows both owner and 
visitors to trust those public-facing services using Monkeysphere.


> At the moment there is not SSL handling at all in plinth nor in the 
> freedombox setup, making both jwchat plinth and owncloud show up 
> without encryption and passing password in clear text.  This really 
> should be changed, but I have not yet figured out what the plan for 
> SSL is nor who is working on fixing it for Freedombox.  Anyone able to 
> enlighten me?

Noone is (being loud about) working on TLS for FreedomBox.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/freedombox-discuss/attachments/20130923/84913b95/attachment.sig>