>On Wed, 17 Nov 2004 Nico.Baggus_at_mail.ing.nl wrote:
>
>> Now the cacert files can use some new entries, How about adding
these guys
>> to the default distribution?
>>
>> http://www.cacert.org/
>
>The default cacert bundle has been exactly the same for a very long
time so I
>guess we need to face this sooner or later. The question that we then
face is
>"on what premises do we add new certs?".
>
>Since the Mozilla project already have a set routine and an
established system
>to deal with this subject, I'm leaning towards replacing our cacert
bundle
>with the one we extraxt and convert from the Mozilla project. If it
allows us,
>license-wise.
I think this is definitely a good approach. Although I'd like to see
CACert
>
>Then again, cacert.org doesn't seem to be in the Mozilla cacert
either...!

And quite an interesting saga it is, too! The story of CACert's
almost-but-not-quite
inclusion in the Mozilla root certs reads like a transcript from a
reality tv show.

On one extreme there are rabid, fanatical open-source people who want
nothing to do
with any commercial products, on the other extreme are the corporate
shills trying to convince people that having a quarter-million dollars
makes you inherently trustworthy. And stuck in the middle,
people who just want affordable certificates.

I would really like to see some alternatives to the bumbling giants
like Verisign get better distribution,
so I would like CACert to be in the curl bundle, but I do think it
makes sense to follow MozFoundation's lead for the default certs. My
suggestion would be to provide two bundles, and let the user choose
which one to use at time of installation.

> Daniel Stenberg -- http://curl.haxx.se -- http://daniel.haxx.se

> Dedicated custom curl help for hire: http://haxx.se/curl.html

Cheers,

Bill Mercer - National Center for Construction Education and Research
3600 NW 43rd St
Gainesville, Florida 32606
http://www.nccer.org
Phone 352-334-0911 Fax 352-334-0932
=============================================

                                       
Received on 2004-11-18