CAcert System Admins discussion list

[Andreas Bürki <abuerki AT cacert.org>]

Ian G schrieb:
> blog comments, X 2.
>
> I thought I could write a comment on the blog, but it just
> disappeared...  is some spam blockage still in place?  I'm logged in
> as iang, presumably using some cert.
>
> Anyway here's the (real) comment:
>
> when using a browser (Firefox) that has not downloaded the CAcert.org
> root, the mainpage display of the blog is mucked up.  From what I have
> seen before it looks like the stylesheet might be on a https URL and
> therefore is silently dropped.   If so, it might be possible to put it
> on a relative URL like /stylesheet or at least that has worked for me
> on my blog.
>
> I know it is good security practice to migrate as fast as possible to
> TLS, but the comma people also want it to be widely readable :)
Of course, otherwise it would just be a "me-and-myself" exercise. ;-) So
it's somehow a trade off between security and open communication within
CAcert.org Community and the external crowd. Means, at later stage,
comments on blog articles should be possible from CAcert.org Community
AND from the outside crowd. This outside crowd comments have to be
moderated for security and privacy / data protection reasons, or
generally speaking, to avoid unfair comments. Does the crowd have to do
to do login, if comments are moderated / controlled? I'm not really sure
about this. What would be the workload to moderate / control and who
does it?
>
> iang
>


-- 
Andreas Bürki - 
abuerki AT cacert.org
CAcert Assurer for People & Organizations

CAcert.org - Secure Together
http://www.cacert.org

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature