[Fiware-support] Fwd: digital sertificate for fi-ware.org while the site is forge.fi-ware.org

[Juanjo Hierro]

  Para vuestra consideración.   No sé si tiene que ver con los tempas de securización que habíamos identificado como pendientes.

  Saludos,

-- Juanjo

-------- Original Message --------
Subject:        digital sertificate for fi-ware.org while the site is forge.fi-ware.org
Date:   Wed, 8 Jun 2011 10:27:46 +0200
From:   Moltchanov Boris <boris.moltchanov at telecomitalia.it><mailto:boris.moltchanov at telecomitalia.it>
To:     JUAN JOSE HIERRO SUREDA <jhierro at tid.es><mailto:jhierro at tid.es>


Dear Juanjo,

Sorry to disturb you. I’ve noticed that the ssl connection of fi-ware authentication (the rest is still unprotected http) is using the x509 cert. issued for fi-ware.org dname, while the web name is forge.fi-ware.org. Therefore the browsers will always alarm users at the first fi-ware access and forse users to accept “incorrect” situation for not-allarming future use.

Probably it would be better to issue a dns certificate for fi-ware.org domain, then all *.fi-ware.ore names are “covered” or issue the cert. for forge.fi-ware.org (is usage of forge word is unavoidable). In the last case we could extend then ssl to entire web site and not only for authentication.

It just a comment, I know that you’re quite busy therefore decide yourself to consider it by yourself, to discharge this message or forward it to the security/forge team.

Best Regards,
Boris
Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie.

This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks.

[cid:part1.09000103.00070007 at tid.es]Rispetta l'ambiente. Non stampare questa mail se non è necessario.

________________________________
Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at.
http://www.tid.es/ES/PAGINAS/disclaimer.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-support/attachments/20110608/98f06028/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 677 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-support/attachments/20110608/98f06028/attachment.jpe>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jhierro.vcf
Type: text/x-vcard
Size: 429 bytes
Desc: not available
URL: <https://lists.fiware.org/private/fiware-support/attachments/20110608/98f06028/attachment.vcf>