additional weblog entries to write:
- TLS Frustrations 2: TLS revocation infrastructure: if you're not checking revocations, how big is your window of vulnerability for a compromised cert?
- TLS Frustrations 3: TLS client sophistication: Why can't i tell firefox
Trust steve's CA for *.debian-administration.org and *.steve.org.uk but nowhere else?
- issues with stashless KDCs (and other daemons which need human intervention on startup: policy-rc.d?
- LoÃ¯c Minier
- Loï¿½c Minier