Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 09 Apr 2012 08:50:09 +0200
From: Yves-Alexis Perez <>
Subject: Re: CVE request: gajim - code execution and sql

On dim., 2012-04-08 at 23:21 -0600, Kurt Seifried wrote:
> On 04/08/2012 07:33 PM, Carlos Alberto Lopez Perez wrote:
> > On 08/04/12 17:59, Kurt Seifried wrote:
> >> On a side note: if you want a free SSL certificate please use 
> >> something like which is included within
> >> most browsers. is not included in any (that I know of)
> >> browsers, I have no idea what the cacert practices are (and I
> >> can't find any documentation on their site) so there's no way
> >> that root key will be loaded by myself (and most people I know).
> > 
> > 
> > CA is trusted by the majority of Linux/BSD distributions
> > and therefore for any browser running on it. 
> >
> According to the page you quote it's not in any Mozilla browsers by
> default (or any major web browser that I can see), it's not in Fedora
> or Red Hat Enterprise Linux or any derivatives of Red Hat Enterprise
> Linux, or Ubuntu or SuSE Linux to name a few (not to mention Mac OS X
> or Windows). is included in Debian ca-certificates package, and thus in
the Ubuntu one (just stating fact, not that I find that good or bad).
> I don't understand why people choose a widely unsupported CA when
> there are widely supported CAs like StartCom that offer free
> certificates. Please, use supported CAs.

This is a bit off-topic (for the thread, maybe not for the list). It
seems that people like because of the trust model it
represents (afaict it tries to fit the GPG web of trust to x509).


Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.