Re: Sander, we're planning SSL on svn.collab.net soon...

On Tue, Aug 13, 2002 at 01:11:52PM -0700, Greg Stein wrote:
> On Tue, Aug 13, 2002 at 02:30:59PM -0500, Karl Fogel wrote:
> > Timothee Besset <ttimo@idsoftware.com> writes:
> > > I suppose you will want to have the SSL certifcate signed by a
> > > certificate authority and you don't want to sign it yourself?
> >
> > Actually, we're doing this more to help people get around
> > uncooperative proxies than for real security.
>
> And a verifiable certificate is for *authentication*, not for encryption. We
> can self-sign a certificate and get the same level of strong encryption. So
> we *will* have "real security" in the sense of "real encryption."
>
> We just won't be using the associated certificate for authenticating that
> we're talking to the "right" server.

The client is currently not verifying neither the certificate nor
the common name so there is no win in having an offical certificate.

-- 
B.Walter              COSMO-Project         http://www.cosmo-project.de
ticso@cicely.de         Usergroup           info@cosmo-project.de
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org