Slashdot Mirror


User: StartCom

StartCom's activity in the archive.

Stories
0
Comments
44
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 44

  1. Re:Security. on Is It Time For an Open Source Certificate Authority? · · Score: 1

    Mozilla and many other have included the StartCom CA. See the full list here: http://cert.startcom.org/?app=140

  2. Re:It's not going to happen on Mozilla and Google — Exchange Killers At Last? · · Score: 1

    Try Zimbra at http://www.zimbra.com/

  3. Only a few weeks behind...StartCom... on CentOS 5 Released · · Score: 1

    "Only a few weeks behind the release of RedHat Enterprise 5"? Whereas StartCom released its clone almost two weeks ago! However /. doesn't think it was news ;-) , but Linux-Watch did...

  4. Re:Who would want to? on EU Rejects Microsoft Royalty Proposal · · Score: 1

    Well...I do have calendaring in Thunderbird with http://www.mozilla.org/projects/calendar/releases/ lightning0.3.1.html My organization is 100% Linux based and 100% MS free, there is no need for Exchange (in my opinion). Additionally Exchange is bloated from what I saw last time...just for serving mail and some calendar sharing? In short, if there is a will there is a way! But I'm not sure if everybody whining about the MS lock-in really wants to do without MS products. It's certainly possible and everything else are excuses.

  5. Re:Who would want to? on EU Rejects Microsoft Royalty Proposal · · Score: 1

    Why Exchange? There are plenty of mail servers, which do exactly what you need; Sending and receiving mail...

  6. Re:wtf! on DHS Wants Master Key for DNS · · Score: 1

    But it helps! It's a first step...supposed you know that your DNS data is supposedly secured, one tends to trust and be less careful. The next step would be a spoofed SSL from some US CA ;-)

  7. Re:DNSSec on DHS Wants Master Key for DNS · · Score: 3, Insightful

    However it shouldn't belong to anyone, but be free! Having the keys in the hands of any government is dangerous!

  8. DNS Roots on New IAB Chair Defends DNSSEC · · Score: 1

    As long as DNS root servers are unsigned, how can the regular DNS servers start to implement that? Sweden and Puerto Rico???

  9. Re:Microsoft has finally done it! on MS Promotion Site Flagged By MS Anti-Phishing · · Score: 1

    It seems, that it's not them which produced the software...hence it works... ;-)

  10. Re:The Information Bar in Internet Explorer on What Vista Is Really Like · · Score: 1

    Hehe...All of them may apply.

  11. Re:The Information Bar in Internet Explorer on What Vista Is Really Like · · Score: 1

    Really? I never seen any message about blocked pop-ups...must be made specially for the Winblows users to feel cozy and comfortable at home... Using FF2 on Linux.

  12. Re:Cert Authorities? on Study Finds IE7 + EV SSL Won't Stop Phishing · · Score: 1

    There is higher validation! Just check it out! Except that, low assurances was not the invention of StartCom, but they were the first to provide it without charge! Today in some browsers even trusted by default!
    Should you need higher assurance, check out StartCom's Class 2 certificates or the Web-of-Trust where a notary must be Class 2 validated to start with...And certainly no extortion there...

  13. Re:Cert Authorities? on Study Finds IE7 + EV SSL Won't Stop Phishing · · Score: 1
  14. Re:so much for free speech on Wikipedia Blocks Qatar [Updated] · · Score: 1

    This explain to me a lot!

  15. Re:Lovely accent on A Working, Winged Jetpack from Switzerland · · Score: 1

    Actually four, including Romantsh...But than, calling the Swiss-German, German...is almost insulting the Swiss. Seriously! Except that, the Germans don't understand it, perhaps at most a few words here and there.

  16. Re:hmmp on A Working, Winged Jetpack from Switzerland · · Score: 1

    Don't think so. It's heavy when full of fuel, but that's gone at landing...Leaving only the fiber wings and jets.

  17. Re:UBUNTU ! Why Hath Thou Foresaken Me ? on MySQL Quietly Drops Support For Debian Linux [UPDATED] · · Score: 1

    Haha...that's the best one ever!

  18. Re:Announcement (With Links) on The Case for OpenID · · Score: 1

    I'm glad to announce, that I have installed a new OpenID Server for anybody to use. This is a supper-trooper and absolutely cool OpenID server, since it doesn't require you to sign up, register or anything...Total privacy! You can choose any user name and change the name every time if you wish, all you have to do, is to provide at LiveJournal or other blog/forum, a URI like http://123.no-password.com...everyhting/ works, no questions asked! You can even choose a user name somebody else used previously. This is specially interesting, since viagra.no-password.com will become reusable...

    I simply downloaded one of the libraries from the OpenID web site and removed any authentication checking (patch available), so that when you have to authenticate with no-password.com the web site simply post's you back to LiveJournal with is_valid="true". Also I removed the association for shared secrets with the RP, since there is nothing here to protect and completely optional according to the specs. This makes no-password.com the fastest OpenID server, since we don't use SSL and have no need to create the assoc_handle. I'm sure we gained about 10 milliseconds on this! BTW, did I tell you, that no-password.com is completely private and anonymous? Any log files created by the server are directed to /dev/null so that any traces of your visit at no-password.com are destroyed immediately! This is much better that the PiP offered from Verisign, since they probably keep log files and make back ups of their databases ;-) and because according to the specs the IdP establishes whether the End User is authorized to perform OpenID Authentication and wishes to do so and the manner in which the End User authenticates to their IdP is beyond the scope of the OpenID Authentication 2.0 Specifications, all users are authorized at no-password.com without questions asked. Cool, isn't it?

    I'm sure you now understand how useful the OpenID framework is and you decided to add OpenID login to your forum immediately. There are no requirements on your part, but you should....well, really you should make a small form at your forum, so the user can enter the no-password.com URI. It's also recommended that you place the OpenID logo
    However, I'm not sure, if I'll keep no-password.com, since I just bought it and can return the domain within 10 days without getting charged. Anyway, perhaps I'll get another one (no-questions-asked.com is free) in ten days....I'll keep you updated on this!

    Source: http://openid.net/pipermail/security/2006-November /000165.html

  19. Announcement on The Case for OpenID · · Score: 1

    I'm glad to announce, that I have installed a new OpenID Server for
    anybody to use. This is a supper-trooper and absolutely cool OpenID
    server, since it doesn't require you to sign up, register or
    anything...Total privacy! You can choose any user name and change the
    name every time if you wish, all you have to do, is to provide at
    LiveJournal or other blog/forum, a URI like
    http://123.no-password.com...everyhting/ works, no questions asked! You
    can even choose a user name somebody else used previously. This is
    specially interesting, since viagra.no-password.com will become
    reusable...

    I simply downloaded one of the libraries from the OpenID web site and
    removed any authentication checking (patch available), so that when you
    have to authenticate with no-password.com the web site simply post's you
    back to LiveJournal with is_valid="true". Also I removed the association
    for shared secrets with the RP, since there is nothing here to protect
    and completely optional

    according to the specs. This makes no-password.com the fastest OpenID
    server, since we don't use SSL and have no need to create the
    assoc_handle. I'm sure we gained about 10 milliseconds on this! BTW, did
    I tell you, that no-password.com is completely private and anonymous?
    Any log files created by the server are directed to /dev/null so that
    any traces of your visit at no-password.com are destroyed immediately!
    This is much better that the PiP offered from Verisign, since they
    probably keep log files and make back ups of their databases ;-) and
    because according to the specs the IdP establishes whether the End User
    is authorized to perform OpenID Authentication and wishes to do so and
    the manner in which the End User authenticates to their IdP is beyond
    the scope of the OpenID Authentication 2.0 Specifications, all users are
    authorized at no-password.com without questions asked. Cool, isn't it?

    I'm sure you now understand how useful the OpenID framework is and you
    decided to add OpenID login to your forum immediately. There are no
    requirements on your part, but you should....well, really you should

    make a small form at your forum, so the user can enter the
    no-password.com URI. It's also recommended that you place the OpenID
    logo http://openid.net/login-bg.gif at the beginning of the form
    field. Well, perhaps you just remove any authentication at your
    forum...it's useless anyway...Count on no-password.com to always
    authenticate the users of your forum positively!

    However, I'm not sure, if I'll keep no-password.com, since I just bought
    it and can return the domain within 10 days without getting charged.
    Anyway, perhaps I'll get another one (no-questions-asked.com is free) in
    ten days....I'll keep you updated on this!