Comments (5)
Government is sensitive, and I'd be more cautious than normal about favoring specific CAs. My personal pref would be to reference several reputable sources.
from https.
I believe the goal of uniformity and consistency is very important, for getting HTTP to HTTPS task accomplished.
If we cannot have a single source for all US Government to get its CERTS from, which could then be used government-wide, then at the minimum, we need to have a government-wide purchase agreement that we can all use, to buy CERTS. That would avoid pitfalls like favoring specific CAs.
from https.
If we cannot have a single source for all US Government to get its CERTS from, which could then be used government-wide, then at the minimum, we need to have a government-wide purchase agreement that we can all use, to buy CERTS. That would avoid pitfalls like favoring specific CAs.
It seems to me that that would favor whatever CAs make it onto the blanket purchase agreement. I'd personally argue that that describes the situation today with Content Delivery Networks.
As it is, right now an agency can use whatever CAs they want to, including the CAs that provide certs for $16, $9, or $0/year. That seems good for efficiency, market liquidity, and cost savings to the taxpayer.
from https.
I updated the description with a rewrite of what I think this page should contain.
from https.
Fixed by #149.
from https.
Related Issues (20)
- Deadline extension or other flexibility for http:// system identifiers in XML DOCTYPEs HOT 2
- Suggest update of recommendation for Referrer-Policy HTTP header
- Add this repository to the GSA code inventory HOT 1
- look
- Use Circle CI for build testing HOT 1
- Active Directory Federation Services server HOT 4
- Resources link doesn't work HOT 1
- Dead links to idmanagement.gov HOT 1
- While performing https checking, determine which domains chain to the FCPCA prior to its removal from trust stores HOT 2
- Update gulp to 4.0
- Re-Activate on Federalist HOT 4
- Update node version HOT 13
- Include TLS 1.3 in list of TLS versions
- Activate https on my iPhone
- Acc
- release.niem.gov/niem/5.0/xsd/niem-core.xsd
- seizedservers dot com has invalid HTTPS
- Security Policy violation Branch Protection HOT 177
- Security Policy violation SECURITY.md HOT 8
- Security Policy violation Repository Administrators HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from https.