CAcert System Admins discussion list

[Ian G <iang AT cacert.org>]

On 11/09/2009 14:45, Daniel Black wrote:
> FYI your blog admin monkeys have done a bit of work getting certificate
> authentication going on the blog.
>
> Features:
> * Author privileges to named certificates
> * Contributor (moderated posts) for unnamed certificates
> * Existing accounts still work if you have a certificate for the email address
> matching your account
> * Existing accounts will update to Author privileges when a named certificate
> is presented.
> * Autoregistration on presenting a certificate to login or manually doing a
> registration with a certificate.


OK, super!

> Non-Features:
> * Due to the complexity and limited time for testing dual support of
> certificate and password logins has been dropped in favour of only certificate
> logins. Password logins may be examined if there is a need.


Sounds reasonable to me.


> The plan is to test it a bit more hopefully next week and deploy it a week
> after. We'll let you know when it is done.
>
> If anyone wants to do a code review let us know.
>
> New registrations have been temporarily disabled due to blog spam that I'm
> feeling obliged to moderate.


OK.  BTW, has anything ever happened over the request to enable diggit 
and so forth?

iang

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature