4 ms·

https://joindiaspora.org/ https://joindiaspora.org/ is linked in the article and gives me giant security certificate warnings. https://joindiaspora.com/ https:/

https://joindiaspora.org/ https://joindiaspora.org/ is linked in the article and gives me giant security certificate warnings. https://joindiaspora.com/ https://joindiaspora.com/ looks like a real site. https://diasporafoundation.org/ https://diasporafoundation.org/ (linked from the .com) also has giant warnings. I'm hesitant to accept the security promises of sites who don't bother to get their certs set up correctly.

klez 14y ago
> I'm hesitant to accept the security promises of sites who don't bother to get their certs set up correctly. Or that just don't want to pay to have a shiny certificate that won't trigger alerts in your browser. The certificate is just self-signed, not necessarily invalid or dangerous.
- marcosdumay 14y ago
  Not dangerous, but completely useless. Self signed certificates are only usefull if you communicate them by another medium. And even then, browsers make it quite hard to manually add certificates.
- pseudonym 14y ago
  By that logic, why bother paying for a shiny domain name? Why not just post the IP address on HackerNews and have people go to it directly? The value that Diaspora would have is in getting people to use it, not in the actual software; and that includes people who aren't necessarily tech-savvy. If your browser throws out a giant red page talking about an untrusted page, how many of those people do you really think you're going to get?
- bstpierre 14y ago
  Actually, it's not "just self-signed", it's long since expired: The certificate expired on 01/30/2009 10:59 AM. and: The certificate is only valid for plesk
shmerl 14y ago
Those sites are outdated, since article isn't very recent. Here are the up to date sites: * https://joindiaspora.com https://joindiaspora.com (developers pod) * https://diaspora-project.org https://diaspora-project.org (project community site) List of pods: * https://diasp.eu/stats.html https://diasp.eu/stats.html * http://podupti.me http://podupti.me

klez 14y ago

> I'm hesitant to accept the security promises of sites who don't bother to get their certs set up correctly. Or that just don't want to pay to have a shiny certificate that won't trigger alerts in your browser. The certificate is just self-signed, not necessarily invalid or dangerous.

marcosdumay 14y ago
Not dangerous, but completely useless. Self signed certificates are only usefull if you communicate them by another medium. And even then, browsers make it quite hard to manually add certificates.
pseudonym 14y ago
By that logic, why bother paying for a shiny domain name? Why not just post the IP address on HackerNews and have people go to it directly? The value that Diaspora would have is in getting people to use it, not in the actual software; and that includes people who aren't necessarily tech-savvy. If your browser throws out a giant red page talking about an untrusted page, how many of those people do you really think you're going to get?
bstpierre 14y ago
Actually, it's not "just self-signed", it's long since expired: The certificate expired on 01/30/2009 10:59 AM. and: The certificate is only valid for plesk

shmerl 14y ago

Those sites are outdated, since article isn't very recent. Here are the up to date sites: * https://joindiaspora.com https://joindiaspora.com (developers pod) * https://diaspora-project.org https://diaspora-project.org (project community site) List of pods: * https://diasp.eu/stats.html https://diasp.eu/stats.html * http://podupti.me http://podupti.me