Hi, I don't speak German so I will try to respond as best I can.

I'm not sure about the issues with SSL, what I can say is that the certificate here is Self Signed, it's actually signed by my own CA.. .

You can verify the SHA by checking through DNS

dig mist.loozah.com TXT

it should return "SHA1 Fingerprint=C8:DD:2F:2F:78:8C:8D:16:07:5B:77:8C:F9:EC:05:A9:83:8E:44:19" And that should correspond to the SHA1 fingerprint of the certificate.


Please do let me know if you see any other certificate for this website.

If you want to read more about what I'm doing here with the SSL you may read SSL Without Built In Browser Certificates | manurevah on Manurevah


As for the friendika/friendica thing, I have changed the submit link in the configuration, hopefully that fixes the issue.


Cheers und Danke,

thnx for the fast answer - for not speaking german you understood all the points - this helped and i learned a lot. i got the point with the 'pay-for-certification-stuff' - its like the rating agencies in international banking - they got paid from the companies they should evaluate...
the prob remains for 'non-geeky' friends (like myself) for they just get this horroble warning in there browser and the 'IF YOU REALLY RALLY WANT TO SEE THIS CONTEND, FROM NOW ON YOU ARE ON YOUR OWN RISK' message :) I just ignored it for some reason... after telling the browser to make an exception everything works fine - anyway thanks for this great work

I do understand that my views on SSL could block out some/many users. I just feel that the current situation, accepted by almost everyone, is so wrong that I don't wish to buy in, no matter how cheap a signature may cost.

I don't make any money out of this (and don't want to) so that helps relieve any pressure to do things like everyone does. This is just a node I installed for myself and then opened it up to help get more users on to Friendica.

I'm glad you have joined and I am glad if I have helped you learn something new today. : ]

Also note the method for verifying the SSL's fingerprint, should you change computers or should I change the certificate.

Cheers,

i completely understand your point on not paying for this 'service' and absolutely accept it.

maybe there is a way to give all visitors the essence of the information on how the certification buissnes works and why one gets this browser warning before opening the contend - so anybody visiting the site has the chance to learn what i learned from this. maybe this is possible with some kind of 'entrance'-area just in front of the ssl-area. eg, entering mist.loozah.com shows a normal html page with the info from your webside on how to verify the ssl-fingerprint and the user is already 'warned' of the warning of his browser and knows how to deal with it before he continues to this nice node in the ssl area. she or he can decide to 'trust' the information an use the alternative verifying methode you describe, wich costs nothing. i'm not a programmer but maybe this could work. introducing some kind of 'atrium' or front court before the ssl-area. just thoughts... best, a.

Andre, it is indeed a good idea. I'm actually pleasantly surprised that you were curious about this and have understood the concept. I will see what I can do (time time time).

Cheers,