Code Signing Renewal

[NewsArchive]

> The saga - song and dance - continues.

The saga has now ended - many bottles of whiskey later and multiple
visits to the therapist.

The long and short of it is the certificate eventually arrived after
chasing Manchester every day. The main problems were lost in
translation stuff and poor communication from them.

We now have a dedicated file for this exercise with meticulous notes on
how to expedite and decided on only one year certificates as practice
makes perfect. We now how to handle this puppy. Three years is way too
far in the distance. The planet has changed dramatically by then.

Depending on how we feel next year or if the aliens have not arrived yet
we may decide on three years.

Cheers
Andre

[NewsArchive]

Good luck with that, Andre.

It sounds as if we will not be able to buy this kind of certificate
after June. It will be certs on a dongle. Buy extra dongles. Keep
one in your safe deposit box.
I'm glad my new old-fashioned cert is good for 3 years, anyway.

Didn't you read those links from Clarion Hub?

That's why I decided not to bother updating my how-to PDF... it it's
going to be out-of-date in a few months.

https://www.youtube.com/watch?v=221vgznA7WA
https://www.ssl.com/article/code-sig...n-june-1-2023/
https://www.ssl2buy.com/wiki/changes...ng-certificate

jf

[NewsArchive]

Hi Andre,

> We now have a dedicated file for this exercise with meticulous notes
> on how to expedite and decided on only one year certificates as
> practice makes perfect. We now how to handle this puppy. Three years
> is way too far in the distance. The planet has changed dramatically
> by then.
>
> Depending on how we feel next year or if the aliens have not arrived
> yet we may decide on three years.

I can 100% guarantee that your file is already outdated! I met a guy
from Comodo once at a conference and it was positively frightening to
hear about how that was operated! The incompetence, ignorance and
carelessness was just astounding. And he admitted as much. And this is
what we are "protecting" our products with!

Best regards,


> rnor Baldvinsson

Icetips Alta LLC

[NewsArchive]

> It sounds as if we will not be able to buy this kind of certificate
> after June. It will be certs on a dongle. Buy extra dongles. Keep
> one in your safe deposit box.
> I'm glad my new old-fashioned cert is good for 3 years, anyway.
>
> Didn't you read those links from Clarion Hub?
>
> That's why I decided not to bother updating my how-to PDF... it it's
> going to be out-of-date in a few months.
>
> https://www.youtube.com/watch?v=221vgznA7WA
> https://www.ssl.com/article/code-sig...n-june-1-2023/
> https://www.ssl2buy.com/wiki/changes...ng-certificate
>
> jf

Hi Jane

I did not read/listen to any of that.

The entire code signing / ssl industry looks more and more like a
racket. It does explain the evolution of LE.

Maybe there will be a similar move for CS.

Human beings have this propensity to try and make things complicated and
obtuse - it is a Seinfeld moment - with males always trying to assign
the most important sounding titles to their job positions.

Thanks for the links - everything may change before June anyway. And
existing certificates may just stop working. None of this security
actually means anything. Developers who work in the field of encryption
will tell you so. Some of them have little games who can crack what
first. - over a pint or two. One of my mentors did this for fun at
weekly computer club meetings.

Anyways - till next time if it ever comes around.

Cheers
Andre

[NewsArchive]

> I can 100% guarantee that your file is already outdated! I met a guy
> from Comodo once at a conference and it was positively frightening to
> hear about how that was operated! The incompetence, ignorance and
> carelessness was just astounding. And he admitted as much. And this is
> what we are "protecting" our products with!

Hi Arnor

I would say you are correct - clearly it is out of date.

Fortunately for me my approach to life is one of a stoic. I do not
expect anything to work. Especially anything technological. I guess I
am a techno pessimist - accurately defined as a techno optimist with
loads of experience.

When you break it down there is no real protection in the world of
technology.

Cheers
Andre