CAcert System Admins discussion list

[Alejandro Mery Pellegrini <amery AT cacert.org>]

Hi Daniel,

> Does CAcert send out reminder emails for everyone when certs are
> about to expire? Is this granular enough to support multiple
> certificate owners within a domain? If it becomes a problem for
> us to maintain dispersed certificates, I'm sure others do too.
> Lets get this as a function of BirdShack[1]. Or maybe a XMLrpc
> function to autoreplace expired certificates :-) (i'll fully read
> the development plan first).

In the current system the way of "delegating" foo.cacert.org is done
by verifying control over 
root AT foo.cacert.org
 (where root can be any
of a list of accounts) but if foo.cacert.org doesn't have MX we are
doomed.

In BirdShack's model the idea is that the "owner" of cacert.org can
*delegate* to other members some control over specific subdomains
directly. And using the public API we can actually automatize the
renewal/installation of certificates even if it wasn't initially
intended that way.

Alejandro

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature