Walletwasabi: Add EV ssl cert (after it arrives)

[nopara73]

[JuniperTonic]

https://letsencrypt.org/
This is a CA that will give you a free SSL cert to use with your website. Not sure if you knew about it but its part of a movement to move the web to encrypted communications. Hope it helps!

[nopara73]

@JuniperTonic Thanks, it could had help, but oh well, we already ordered from digicert.

[nopara73]

Cetbot seems to do instant certificate: https://twitter.com/coinableS/status/1057037782189633536

[nopara73]

It seems like letsencrypt is instant too? https://twitter.com/Carsten71071425/status/1057038236898467841

[nothingmuch]

same thing - let's encrypt is a certificate authority with ACME support, certbot is an ACME client and webserver configuration tool, and one of the ways of using a CA like let's encrypt. you can also use a webserver or proxy with built in ACME support to avoid configuring the server (traefik is a popular choice)

[nopara73]

Ok, that was unexpectedly simple. Thanks guys. Yet I won't close this issue, because we ordered EV certificate, so that makes sense to change it when it arrives.

[nopara73]

@bharmat Why was it rejected?

[nopara73]

Should we just go with our free ssl for now and not concern ourselves with the EVV until we're better on funds?

[nopara73]

@molnard suggested to keep this issue around and not close it.

[prusnak]

Browser vendors are slowly killing the importance of EV certs: https://www.troyhunt.com/extended-validation-certificates-are-dead/

[nopara73]

This is a vanity feature that makes very little sense technically, (if any at all.) This is why it does not matter for most sites, but for a site that wants the visitor to download a software in an age where everything is on the web, even more, this software is going to handle a his money, in this scenario every little thing matters when it comes to trust building. As long as Chrome or Firefox and Edge keeps it around, it still makes sense, assuming these dominate the market. In fact, I'd argue we should double down and go directly to secure site ev ssl.

[2pac1]

I vote for EV as every little thing counts, and especially critical software like wasabi

[nopara73]

ACK. @bharmat can you go ahead and apply for a new one?

[bharmat]

Sure, I'm on it!

[2pac1]

Contact [email protected] to see if they can support the project and offer single domain EV free of charge.

[nopara73]

Done! Looks neat!

[nopara73]

Decided to settle with letsencrypt after Digicert expires as Chrome dropped the vanity bar.

[2pac1]

I agree

On Sat, 25 Apr 2020, 15:05 nopara73, [e-mail] wrote:

Decided to settle with letsencrypt after Digicert expires as Chrome
dropped the vanity bar.

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/zkSNACKs/WalletWasabi/issues/759#issuecomment-619376923,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AILPGMEXVFFRAZN3NWG56ODROLN3FANCNFSM4F7JFA3A
.