Re: [Inkscape-devel] Vectors Meeting - Tomorrow - Possible Postponement

--===============8521576491951508783==
Content-Type: multipart/alternative; boundary="0000000000006653ed05887a2370"

--0000000000006653ed05887a2370
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

If there's no login, there's no problem.
Anywhere I'm entering in username and passwords, and storing stuff on a
server, you better believe it should have encryption.
But whether or not you think we need it, we are an official project who
cares about the security of our users. We depend on mutual trust, and it
looks very bad when browsers reject our invalid credentials (and rightly
so).

Obviously, we want our users to trust us, and having official websites and
chat services fail basic security checks destroys that confidence and trust=
.

So yea, big deal from my perspective. :)

-C


On Thu, May 9, 2019 at 4:43 PM brynn <[email protected]> wrote:

> What about websites which have no certificate at all?  You just don't use
> them?
> Those websites will never have warnings about the certificate, because
> they
> don't have one.  It doesn't necessarily mean that they aren't safe sites.
> InkscapeForum.com is one of those, fyi.
>
> Of course we can agree to disagree :-)
>
> All best
> brynn
>
> -----Original Message-----
> From: C R
> Sent: Thursday, May 09, 2019 7:42 AM
> To: Brynn
> Cc: Inkscape User Community ; Ryan Gorley ; inkscape-devel
> Subject: Re: [Inkscape-user] [Inkscape-devel] Vectors Meeting - Tomorrow =
-
> Possible Postponement
>
>
> No, I didn't. But I think it's important for visitors to our site to be
> able to
> trust the chat (especially one you have to sign up for and log into). I
> disagree
> that it's not a big deal.
>
> -C
>
>
>
> On Thu, 9 May 2019, 13:25 brynn, <[email protected]> wrote:
> Wow!  I wonder if that could be some security setting in Chrome?  I'd hav=
e
> to
> look it up to be sure, but I think it's an option in Firefox, to not load
> a page
> with an untrusted certificate.  There are just so many untrusted
> certificates,
> on entirely trustworthy sites, I disabled it.  I still get the warning,
> but the
> page isn't completely blocked.
>
> Did you set a temporary exception?  At least in Firefox, I got the option
> to set
> either a temporary or permanent exception, and that fixed the chat.
>
> Or otherwise, perhaps Chrome should be notified.  To my limited
> understanding,
> that doesn't seem reasonable to block the page and not give a choice.
>
> brynn
>
> -----Original Message-----
> From: C R
> Sent: Wednesday, May 08, 2019 1:57 PM
> To: Inkscape User Community
> Cc: Brynn ; Ryan Gorley ; inkscape-devel
> Subject: Re: [Inkscape-user] [Inkscape-devel] Vectors Meeting - Tomorrow =
-
> Possible Postponement
>
>
> It actually broke the chat entirely in Chrome, even clicking past the
> warning,
> it still would not connect. Fyi
>
> -C
>
>
> On Tue, 7 May 2019, 23:32 Ryan Gorley via Inkscape-user,
> <[email protected]> wrote:
>
>
> Understood. Had to make a call with imperfect information. Sorry for the
> inconvenience. I hope we can pick up the forum stuff at the meeting in a
> couple
> days.
>
>
> Ryan
>
> On 5/7/19 4:29 PM, brynn wrote:
> I'll have to be honest.  This is just my opinion.
>
> I don't consider an expired certificate, or whatever problem it was with
> the
> certificate, to be any kind of serious problem.  I trust that the website
> is
> safe, and no serious threat will show up via untrusted certificate warnin=
g.
>
> In my opinion, the untrusted certificate warnings are built on maximum
> paranoia.
> They truly do sound dire.  But unless  you are making some monetary
> transaction,
> or sharing files or info that should remain secure, they really can be
> ignored.
> Again, my opinion.
>
> All best,
> brynn
>
> -----Original Message----- From: C R
> Sent: Monday, May 06, 2019 8:32 AM
> To: Manuel Jes=C3=BAs Recena Soto
> Cc: inkscape-devel ; Inkscape User Community
> Subject: Re: [Inkscape-user] [Inkscape-devel] Vectors Meeting - Tomorrow =
-
> Possible Postponement
>
>
> We are heavily using this chat across all parts of the project at the
> moment. Do
> we need to worry about stability? Thanks for any advice.
>
> -C
>
>
> On Sun, 5 May 2019, 20:04 Manuel Jes=C3=BAs Recena Soto, mailto:
> [email protected]
> wrote:
>
> Hello Ryan,
>
> If you believe this chat service is critical, I suggest you to schedule a
> meeting with infrastructure team in order to find a better solution.
>
> Regards,
>
>
> On Sat, May 4, 2019 at 2:02 AM Ryan Gorley via Inkscape-devel
> mailto:[email protected] wrote:
>
>
> Hello All,
> Due to the certificate error on chat.inkscape.org, some individuals may b=
e
> scared away from participating in our meeting tomorrow. I'm going to keep
> an eye
> on it, but if the error isn't resolved in the next couple hours I'm going
> to
> suggest we postpone our meeting one week. I'll update everyone on the
> status a
> little later.
>
> - Ryan
>
>
>
> _______________________________________________
> Inkscape-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/inkscape-devel
>
>
>
>
> _______________________________________________
> Inkscape-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/inkscape-user
>
>
>

--0000000000006653ed05887a2370
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">If there&#39;s no login, there&#39;s no problem.=C2=A0<div=
>Anywhere I&#39;m entering in username and passwords, and storing stuff on =
a server, you better believe it should have encryption.</div><div>But wheth=
er or not you think we need it, we are an official project who cares about =
the security of our users. We depend on mutual trust, and it looks very bad=
 when browsers reject our invalid credentials (and rightly so).=C2=A0</div>=
<div><br></div><div>Obviously, we want our users to trust us, and having of=
ficial websites and chat services fail basic security checks destroys that =
confidence and trust.</div><div><br></div><div>So yea, big deal from my per=
spective. :)</div><div><br></div><div>-C</div><div><br></div></div><br><div=
 class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, May 9,=
 2019 at 4:43 PM brynn &lt;<a href=3D"mailto:[email protected]">[email protected]=
</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:=
0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">=
What about websites which have no certificate at all?=C2=A0 You just don&#3=
9;t use them? <br>
Those websites will never have warnings about the certificate, because they=
 <br>
don&#39;t have one.=C2=A0 It doesn&#39;t necessarily mean that they aren&#3=
9;t safe sites. <br>
InkscapeForum.com is one of those, fyi.<br>
<br>
Of course we can agree to disagree :-)<br>
<br>
All best<br>
brynn<br>
<br>
-----Original Message----- <br>
From: C R<br>
Sent: Thursday, May 09, 2019 7:42 AM<br>
To: Brynn<br>
Cc: Inkscape User Community ; Ryan Gorley ; inkscape-devel<br>
Subject: Re: [Inkscape-user] [Inkscape-devel] Vectors Meeting - Tomorrow - =
<br>
Possible Postponement<br>
<br>
<br>
No, I didn&#39;t. But I think it&#39;s important for visitors to our site t=
o be able to <br>
trust the chat (especially one you have to sign up for and log into). I dis=
agree <br>
that it&#39;s not a big deal.<br>
<br>
-C<br>
<br>
<br>
<br>
On Thu, 9 May 2019, 13:25 brynn, &lt;<a href=3D"mailto:[email protected]" targ=
et=3D"_blank">[email protected]</a>&gt; wrote:<br>
Wow!=C2=A0 I wonder if that could be some security setting in Chrome?=C2=A0=
 I&#39;d have to<br>
look it up to be sure, but I think it&#39;s an option in Firefox, to not lo=
ad a page<br>
with an untrusted certificate.=C2=A0 There are just so many untrusted certi=
ficates,<br>
on entirely trustworthy sites, I disabled it.=C2=A0 I still get the warning=
, but the<br>
page isn&#39;t completely blocked.<br>
<br>
Did you set a temporary exception?=C2=A0 At least in Firefox, I got the opt=
ion to set<br>
either a temporary or permanent exception, and that fixed the chat.<br>
<br>
Or otherwise, perhaps Chrome should be notified.=C2=A0 To my limited unders=
tanding,<br>
that doesn&#39;t seem reasonable to block the page and not give a choice.<b=
r>
<br>
brynn<br>
<br>
-----Original Message----- <br>
From: C R<br>
Sent: Wednesday, May 08, 2019 1:57 PM<br>
To: Inkscape User Community<br>
Cc: Brynn ; Ryan Gorley ; inkscape-devel<br>
Subject: Re: [Inkscape-user] [Inkscape-devel] Vectors Meeting - Tomorrow -<=
br>
Possible Postponement<br>
<br>
<br>
It actually broke the chat entirely in Chrome, even clicking past the warni=
ng,<br>
it still would not connect. Fyi<br>
<br>
-C<br>
<br>
<br>
On Tue, 7 May 2019, 23:32 Ryan Gorley via Inkscape-user,<br>
&lt;<a href=3D"mailto:[email protected]" target=3D"_blank=
">[email protected]</a>&gt; wrote:<br>
<br>
<br>
Understood. Had to make a call with imperfect information. Sorry for the<br=
>
inconvenience. I hope we can pick up the forum stuff at the meeting in a co=
uple<br>
days.<br>
<br>
<br>
Ryan<br>
<br>
On 5/7/19 4:29 PM, brynn wrote:<br>
I&#39;ll have to be honest.=C2=A0 This is just my opinion.<br>
<br>
I don&#39;t consider an expired certificate, or whatever problem it was wit=
h the<br>
certificate, to be any kind of serious problem.=C2=A0 I trust that the webs=
ite is<br>
safe, and no serious threat will show up via untrusted certificate warning.=
<br>
<br>
In my opinion, the untrusted certificate warnings are built on maximum para=
noia.<br>
They truly do sound dire.=C2=A0 But unless=C2=A0 you are making some moneta=
ry transaction,<br>
or sharing files or info that should remain secure, they really can be igno=
red.<br>
Again, my opinion.<br>
<br>
All best,<br>
brynn<br>
<br>
-----Original Message----- From: C R<br>
Sent: Monday, May 06, 2019 8:32 AM<br>
To: Manuel Jes=C3=BAs Recena Soto<br>
Cc: inkscape-devel ; Inkscape User Community<br>
Subject: Re: [Inkscape-user] [Inkscape-devel] Vectors Meeting - Tomorrow -<=
br>
Possible Postponement<br>
<br>
<br>
We are heavily using this chat across all parts of the project at the momen=
t. Do<br>
we need to worry about stability? Thanks for any advice.<br>
<br>
-C<br>
<br>
<br>
On Sun, 5 May 2019, 20:04 Manuel Jes=C3=BAs Recena Soto, mailto:<a href=3D"=
mailto:[email protected]" target=3D"_blank">[email protected]</a><br>
wrote:<br>
<br>
Hello Ryan,<br>
<br>
If you believe this chat service is critical, I suggest you to schedule a<b=
r>
meeting with infrastructure team in order to find a better solution.<br>
<br>
Regards,<br>
<br>
<br>
On Sat, May 4, 2019 at 2:02 AM Ryan Gorley via Inkscape-devel<br>
mailto:<a href=3D"mailto:[email protected]" target=3D"_b=
lank">[email protected]</a> wrote:<br>
<br>
<br>
Hello All,<br>
Due to the certificate error on <a href=3D"http://chat.inkscape.org" rel=3D=
"noreferrer" target=3D"_blank">chat.inkscape.org</a>, some individuals may =
be<br>
scared away from participating in our meeting tomorrow. I&#39;m going to ke=
ep an eye<br>
on it, but if the error isn&#39;t resolved in the next couple hours I&#39;m=
 going to<br>
suggest we postpone our meeting one week. I&#39;ll update everyone on the s=
tatus a<br>
little later.<br>
<br>
- Ryan<br>
<br>
<br>
<br>
_______________________________________________<br>
Inkscape-devel mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">I=
[email protected]</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/inkscape-devel" rel=
=3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/listi=
nfo/inkscape-devel</a><br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
Inkscape-user mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">In=
[email protected]</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/inkscape-user" rel=
=3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/lists/listi=
nfo/inkscape-user</a><br>
<br>
<br>
</blockquote></div>

--0000000000006653ed05887a2370--


--===============8521576491951508783==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============8521576491951508783==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Inkscape-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/inkscape-user

--===============8521576491951508783==--