[clue-admin] Cert for TLS.

[Jeff Cann]

Jed S. Baer wrote:
> On Fri, 07 Jul 2006 21:45:46 -0600
> David L. Anselmi wrote:
>
>   
>> I notice that we allow TLS to the web server but we don't have a 
>> meaningful certificate.  Anyone interested in correcting that?
>>     
>
> I've changed the httpd.conf file so that SSL is turned off. I don't know
> whether that impacts anything out there that I'm not aware of, and I
> assume it will disable TLS as well.

Jed,

Could you turn it back on?  Despite the invalid SSL cert, I use https to 
access GNU mailman administrative interface.  It normally sends 
passwords in clear text.  We got hacked at least once through mailman... 
not sure if it was due to clear text passwords or not.

I'm not sure if we need a valid cert,   It's funny to me that Dave 
suggested it because a few years ago, when I last suggested it, it was 
*Dave* who thought it wasn't necessary.  :)  Too bad we lost the 
archives as evidence.  Dang it!

Thanks
Jeff