Discuss mailing list

[Jonah Aragon <jonaharagon AT gmail.com>]

Right, but if we can get people to change DNS servers, I didn't think getting people to add the CA was too much of a stretch. We just need to make sure whatever we come up with is official and part of the Getting Started guide prominently, so people use it.

Jonah

On Jan 8, 2017 4:52 PM, "Dustin Souers" <texnofobix AT gmail.com> wrote:

I have done some research into what is done with Let's Encrypt by running their Boulder server (inside Docker) after commenting the TLD validation check. I am no expert in Go to make the changes that would validate OpenNIC domains only or even better that TLDs only. 

The disadvantage with the CA is that it would work like cacert.org, where each client has to add the CA cert to their machine and isn't already trusted by the OS/browser.