Xfce sub-domains get ssl certificates

[Greg Folkert]

On Fri, 2011-03-25 at 23:53 +0100, Nick Schermer wrote:
> Folks,
> 
> A number of Xfce sub-domains where users login and send data will get
> ssl certificates and https-only access. As a start bugzilla.xfce.org
> is https only. Translations, wiki and forum will follow. I'm not sure
> the last two should be https-only but I guess it won't hurt, unless
> someone complains (?).

Definitely will help those "Internet Explorer" users out there. Actually
now, pretty much all browsers are becoming retentive about SSL things,
cross domain includes, AJAX not working across domains... at least this
will help in that area.

I'm doing PCI compliance for a living now... all I can say is: 

        Thank you Windows for many requirements for certain features
        coming from your casual attitude towards security and privilege
        separation.

Bleah.
-- 
greg at gregfolkert.net
PGP key 1024D/B524687C 2003-08-05
Fingerprint: E1D3 E3D7 5850 957E FED0  2B3A ED66 6971 B524 687C
Alternate Fingerprint: 09F9 1102 9D74  E35B D841 56C5 6356 88C0
Alternate Fingerprint: 455F E104 22CA  29C4 933F 9505 2B79 2AB2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://mail.xfce.org/pipermail/xfce/attachments/20110325/14d63d1a/attachment.pgp>