[fab] Fwd: Re: [Fedora-sysadmin-list] ssl cert for admin.fedora.redhat.com

[Patrick W. Barnes]

Even if we try to hold off for now, we're eventually going to need 
certificates for fedoraproject.org, preferably by a CA that is already 
recognized by the more common browsers.

I would personally like to see us get a certificate for "fedoraproject.org" 
(no subdomain), make "www.fedoraproject.org" a CNAME to "fedoraproject.org", 
and put all content that we need under SSL within 
the "https://fedoraproject.org/" namespace, using reverse proxies if 
necessary, and not on subdomains.  People with a great deal of experience 
with DNS and SSL should understand my technical reasons for this, but it's 
also the cheaper way to go.

-- 
Patrick "The N-Man" Barnes
nman64 at n-man.com

http://www.n-man.com/

LinkedIn:
http://www.linkedin.com/in/nman64

Have I been helpful?  Rate my assistance!
http://rate.affero.net/nman64/
-- 

-------------- next part --------------
An embedded message was scrubbed...
From: Warren Togami <wtogami at redhat.com>
Subject: Re: [Fedora-sysadmin-list] ssl cert for admin.fedora.redhat.com
Date: Mon, 28 Aug 2006 13:08:07 -0400
Size: 5234
URL: <http://listman.redhat.com/archives/fedora-advisory-board/attachments/20060906/f69cc5e9/attachment.eml>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-advisory-board/attachments/20060906/f69cc5e9/attachment.sig>