IETF Logo Mail Archive

Re: [OAUTH-WG] why are we signing?

Peter Saint-Andre <stpeter@stpeter.im> Mon, 09 November 2009 08:12 UTC

Return-Path: <stpeter@stpeter.im>
X-Original-To: oauth@core3.amsl.com
Delivered-To: oauth@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9CAE628C104 for <oauth@core3.amsl.com>; Mon, 9 Nov 2009 00:12:18 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level:
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RtBxIXHwJuCm for <oauth@core3.amsl.com>; Mon, 9 Nov 2009 00:12:17 -0800 (PST)
Received: from stpeter.im (stpeter.im [207.210.219.233]) by core3.amsl.com (Postfix) with ESMTP id 69EC428C1A4 for <oauth@ietf.org>; Mon, 9 Nov 2009 00:12:17 -0800 (PST)
Received: from host-113-169.meeting.ietf.org (host-113-169.meeting.ietf.org [133.93.113.169]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id F06FA40D0B; Mon, 9 Nov 2009 01:12:42 -0700 (MST)
Message-ID: <4AF7CEF8.8030009@stpeter.im>
Date: Mon, 09 Nov 2009 17:12:40 +0900
From: Peter Saint-Andre <stpeter@stpeter.im>
User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812)
MIME-Version: 1.0
To: Chris Messina <chris.messina@gmail.com>
References: <daf5b9570911082102u215dcf22gf0aeb2f3578e5ea0@mail.gmail.com> <90C41DD21FB7C64BB94121FBBC2E72343785078711@P3PW5EX1MB01.EX1.SECURESERVER.NET> <1bc4603e0911090000i6872f482pf1d003442aadd6be@mail.gmail.com>
In-Reply-To: <1bc4603e0911090000i6872f482pf1d003442aadd6be@mail.gmail.com>
X-Enigmail-Version: 0.96.0
OpenPGP: url=http://www.saint-andre.com/me/stpeter.asc
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Cc: "oauth@ietf.org" <oauth@ietf.org>
Subject: Re: [OAUTH-WG] why are we signing?
X-BeenThere: oauth@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: OAUTH WG <oauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/oauth>
List-Post: <mailto:oauth@ietf.org>
List-Help: <mailto:oauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/oauth>, <mailto:oauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Nov 2009 08:12:18 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

<hat type='individual'/>

On 11/9/09 5:00 PM, Chris Messina wrote:

> While it's possibly increasingly common to expect that serious
> developers will go and buy an SSL cert, that may not be the case for the
> wider array of hobbyist types.

CA-issued domain certificates do not necessarily cost money, so even
"hobbyist types" and others can obtain such certificates. Ping me
offlist if you want examples.

Peter

- --
Peter Saint-Andre
https://stpeter.im/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkr3zvgACgkQNL8k5A2w/vzxSACg3ndq597JKGyoxzkL5gX42r8+
F1UAoKmRON0eAxS1/afVS0KJoUC8AQZe
=JORx
-----END PGP SIGNATURE-----

v2.23.0 | Report a Bug | By Email