Received-SPF: pass (sog-mx-1.v43.ch3.sourceforge.com: domain of riseup.net
	designates 198.252.153.129 as permitted sender)
	client-ip=198.252.153.129;
	envelope-from=odinn.cyberguerrilla@riseup.net;
	helo=mx1.riseup.net; 
Message-ID: <1795f3067ba3fcdd0caf978cc59ff024.squirrel@fruiteater.riseup.net>
In-Reply-To: <52A3C8A5.7010606@gmail.com>
References: <52A3C8A5.7010606@gmail.com>
Date: Sat, 7 Dec 2013 19:38:00 -0800
From: "Odinn Cyberguerrilla" <odinn.cyberguerrilla@riseup.net>
To: bitcoin-development@lists.sourceforge.net
User-Agent: SquirrelMail/1.4.21
MIME-Version: 1.0
Content-Type: text/plain;charset=utf-8
Importance: Normal
Content-Transfer-Encoding: quoted-printable
Subject: Re: [Bitcoin-development] Dedicated server for bitcoin.org,
 your thoughts?
Precedence: list

Hello, re. the dedicated server for bitcoin.org idea, I have a few though=
ts

1) I have commented in a blogpost of August 2013 at
https://odinn.cyberguerrilla.org/ with some thoughts relative to possible
issues with CA related to bitcoin.org - where I mentioned something
relative to the DigiCert certificate,
"DigiCert =E2=80=9Cmay revoke a Certificate, without notice, for the reas=
ons
stated in the CPS, including if DigiCert reasonably believes that=E2=80=9D=
 (=E2=80=A6)
=E2=80=9CApplicant is added to a government list of prohibited persons or=
 entities
or is operating from a prohibited destination under the laws of the Unite=
d
States=E2=80=9D (=E2=80=A6) =E2=80=9Cthe Private Key associated with a Ce=
rtificate was disclosed
or Compromised=E2=80=9D"
In the same post I mentioned
"Bitcoin.org has no certificate, no encryption =E2=80=94 a situation whic=
h has its
own obvious problems. Bitcoin.org currently sends users to download the
bitcoin-qt client from sourceforge. Sourceforge is encrypted and has a
certificate based on GeoTrust:
https://www.geotrust.com/resources/repository/legal/"

(Currently (Dec. 7, 2013) bitcoin.org shows as 'not verified' and 'not
encrypted' examining it in a cursory fashion w/ Chrome)

Not sure how this would work, but it would be nice to see the content at
bitcoin.org encrypted, of course, but also further decentralized? how man=
y
mirrors are there of bitcoin.org - not sure, but a few things that come t=
o
mind when thinking of this are Tahoe-LAFS and also .bit stuff (namecoin).=
=20
There are many ways to decentralize something but that is just something
that comes to mind.

This has been discussed at https://bitcointalk.org/index.php?topic=3D1631=
2.0
('Is Bitcoin.org a weakness of bitcoin?) in the past and see also this
https://bitcointalk.org/index.php?topic=3D119652.0 which discusses mirror=
ing
of certain content

Some things to think about.

> I would like to know what are your thoughts on moving bitcoin.org on a
> dedicated server with a SSL certificate?
>
> I am considering the idea more seriously, but I'd like some feedback
> before taking steps.
>
> Sa=C3=AFvann
>
> -----------------------------------------------------------------------=
-------
> Sponsored by Intel(R) XDK
> Develop, test and display web and hybrid apps with a single code base.
> Download it for free now!
> http://pubads.g.doubleclick.net/gampad/clk?id=3D111408631&iu=3D/4140/os=
tg.clktrk
> _______________________________________________
> Bitcoin-development mailing list
> Bitcoin-development@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>