Changes between Version 15 and Version 16 of Signing


Ignore:
Timestamp:
Nov 5, 2015, 1:05:42 PM (9 years ago)
Author:
darkblueb
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • Signing

    v15 v16  
    3131-----
    3232
    33 ''darkblue_b comments'':  I believe there are at least several, related topics here.. OSGeo.org Signing binaries in an official capacity; TLS certificates for web sites to enable modern, safe browsing; OSGeo SAC internal methods to authenticate users and machines within the OSGeo server architecture; OSGeo SAC Roadmap and implementation of chosen activities; OSGeo Board decisions of priorities, funding, and formal external alliances, both explicit and implicit.
     33''darkblue_b comments'':  I believe there are at least several, related topics here: OSGeo.org Signing binaries in an official capacity; TLS certificates for web sites to enable modern, safe browsing; OSGeo SAC internal methods to authenticate users and machines within the OSGeo server architecture; OSGeo SAC Roadmap and implementation of chosen activities; OSGeo Board decisions of priorities, funding, and formal external alliances, both explicit and implicit.
    3434
    35 Note that Globalsign sponsors certificates for FOSS-related non-profits.
     35Note that Globalsign sponsors certificates for FOSS-related non-profits; both Wikimedia Foundation and the Debian Project use GlobalSign as their Certificate Authority (CA)
    3636
    3737''After consultations and some research, I believe OSGeo can use the Debian project method of signing with a GNU PGP key, and put the LocationTech method with a certificate authority as something to be looked into... Generally, I support jgarnett in using money and authoritative signatures for OSGeo projects, but it looks like it is not a requirement to proceed.''