CAcert System Admins discussion list

[Daniel Black <daniel AT cacert.org>]

FYI your blog admin monkeys have done a bit of work getting certificate 
authentication going on the blog.

Features:
* Author privileges to named certificates
* Contributor (moderated posts) for unnamed certificates
* Existing accounts still work if you have a certificate for the email 
address 
matching your account
* Existing accounts will update to Author privileges when a named certificate 
is presented.
* Autoregistration on presenting a certificate to login or manually doing a 
registration with a certificate.

Non-Features:
* Due to the complexity and limited time for testing dual support of 
certificate and password logins has been dropped in favour of only 
certificate 
logins. Password logins may be examined if there is a need.

The plan is to test it a bit more hopefully next week and deploy it a week 
after. We'll let you know when it is done.

If anyone wants to do a code review let us know.

New registrations have been temporarily disabled due to blog spam that I'm 
feeling obliged to moderate.

Thanks,

-- 
Daniel Black
Infrastructure Administrator
CAcert

Attachment: signature.asc
Description: This is a digitally signed message part.