Discuss mailing list

[Jamyn Shanley <jshanley AT gmail.com>]

Thinking it'd be funny to register luci.fur, I went to register.fur to
claim it. However, there is an issue - Their page requires account
registration when choosing a domain, but their security settings
prevent registration.

1. visit http://register.fur/?tpl=domreg
2. click "Login" (https://www.fellig.org/sso/?op=login&r=http://www.nic.fur/)
3. Observe: Invalid server certificate for fellig.org.

Result:
- Chome prevents access to the site completely (no bypass link).
- Firefox warns but provides an "I understand the risks..." bypass link.

The issue: fellig.org uses CAcert for their SSL certificate. This
means certificates won't be trusted or accepted by most users, and the
visitor will have to jump through another hoop just to register a
domain (find, install, and accept the CAcert root certificate --
assuming they even know to do that).

See: http://wiki.cacert.org/InclusionStatus