Only for internal communication; Put in place our own Certificate Authority and sign our self-signed certificates with it

[renoirb]

This will allow us to have under TLS everything that isn’t yet AND to make sure where its in use that we can also check if we should trust the client connecting to a given service.

Connecting through TLS isn’t a statement that the connection should be trusted. But sniffing the certificate, check if we accept the origin of the certificate it provided is a step toward that goal.

Estimated steps

• Create self-signed certificate
• Document how to do
• Make sure the new self-proclaimed CA certificate we created is archived and accessible exclusively to W3C team members
• ... ?

Notes

• apt-get install gnutls-bin
• Look for certtool
• Self signed certificate and becoming our own authority for internal comm

See GnuTLS documentation.

[renoirb]

Related to #70?