[Cryptech Tech] The cert for cryptech.is

Leif Johansson leifj at sunet.se
Sun Mar 30 07:51:42 UTC 2014


On 2014-03-29 23:43, Rob Austein wrote:
> At Sat, 29 Mar 2014 22:41:41 +0100, Leif Johansson wrote:
>>> 29 mar 2014 kl. 21:48 skrev "Michael Richardson" <mcr at sandelman.ca>:
>>>
>>> Suggestion: have a regular page at cryptotech.is, which has a StartSSL
>>> certificate, but put no write-able/important content, and put the trac on
>>> another IPv6/port/name, and use the cryptotech.is CA/DANE for stuff that
>>> requires members.
>>
>> This makes a certain amount of sense to me - separate marketing and theatre from key content.
> 
> Yes.  Trac probably isn't the right tool for marketing content anyway.
> 
>>> Maybe an apache proxy-pass on the "public" site which gives access
>>> to readonly the wiki.
> 
> I need to think about the mechanics and configuration details, but the
> overall approach sounds plausible if the configuration involved
> doesn't turn out to be too complicated.

Also we could use trac.cryptech.is for the trac and just throw up a
wordpress-site (like one usually does) at cryptech.is. That probably
should get its own vm even.





More information about the Tech mailing list