/srv/irclogs.ubuntu.com/2012/03/04/#ubuntu-irc.txt

=== L3top_ is now known as L3top
MonsterKillerHey, using the Encyclopedia, have a factoid i want to set but when i set it, it says it already means something. if i do "no X is Y" it says the factoid isnt known to it yet15:32
MonsterKillerif i try to make it forget it, it says it doesnt exist yet15:33
MonsterKiller:/15:33
_d4vidbazhang, there?16:39
_d4vidbazhang, iam wait about 4 days to -q me .. nothing happens16:40
_d4vidbazhang, i can not send messages to channel16:40
_d4vidbazhang, i mean #ubuntu-ru16:40
jpdsMonsterKiller: 'unforget' it and try changing it again.17:58
MonsterKillerah. ty17:59
MonsterKiller:)17:59
Fuchspangolin: looking good21:12
pangolinthank you for your help21:13
Fuchspangolin: I'd still recommend using SSL though21:13
pangolinhow do i go about doing that?21:14
FuchsXchat it was?21:15
pangolinyup21:15
FuchsI think it has a setting in the server configuration dialog. Are you directly connecting to freenode, or do you have a bouncer or such?21:16
pangolindirect21:16
Fuchsthen there should be a checkbox in the server dialogue21:16
pangolinI need to check the Accept invalid cert box also right?21:18
FuchsI sure hope our certs are valid :)21:18
Fuchsbut yes, depending on what system certs you have, why not.21:19
EvilResistancethe certs are valid, but yoiu need the root certs21:19
EvilResistanceon ubuntu, the root certs for freenode arent included for the cert authority21:19
EvilResistancebut the certs are indeed valid21:19
EvilResistancein XChat, you need to put the SSL port in place of 6667.21:20
EvilResistancethen say "Connect to server via SSL"21:20
EvilResistanceand of course, tell it to ignore cert errors and what not21:20
pangolinheh21:20
EvilResistancefor me, i just connect to my ZNC, doesnt matter if i use SSL or not, since the ZNC is connected to freenode with SSL :p21:21
EvilResistancebut that's me :P21:21
Fuchssame for me, but SSL on both lines21:21
EvilResistanceindeed21:22
EvilResistancesame for me, too, but my phone doesnt like SSL for some reason21:22
EvilResistanceso...21:22
EvilResistancefor that only, i use non=SSL21:22
EvilResistancebut its rare i dont have my laptop, so :p21:22
Fuchspangolin: perfect now :)21:24
pangolinweeeeeeeeeeeeeeeee21:25
pangolinthanks again for the help Fuchs and you too EvilResistance21:25
EvilResistancepangolin, yep21:25
JanCignoring SSL cert errors is bad  ;)21:25
EvilResistanceJanC, the alternative is updating the ca-certificates package with additional root certificates21:26
pangolinI chose not to accept invalid certs21:26
EvilResistancepangolin, you might run inot the random "I will randomly return an invalid cert" error, that is common with FreeNode21:26
EvilResistancegranted, it happens mor eoften with Windows, but it does occasionally happen on Ubuntu / Linux21:26
JanCEvilResistance: you can also install a cert manually (after checking it is legit, of course)21:26
EvilResistanceJanC, indeed, but the ca-certificates package is missing key CA certs21:27
EvilResistancei had to manually install the CA root certs for a legit SSL certification company21:27
JanCto be honest, I think that package includes lots of non-legit CA keys  :P21:27
EvilResistance:P21:28
JanCmost CA companies are a fraud21:28
EvilResistanceVeriSign is a fraud?21:28
Fuchspangolin: you're welcome21:28
JanCyes21:28
EvilResistancestartcom ssl is a fraud?21:28
Fuchsthanks for flying freenode, here is a bag of peanuts *hands*21:28
pangolinsalted?21:28
JanCI got a VeriSign SSL cert for a not yet existing company once, so I don't trust them  :P21:28
EvilResistanceJanC, then take your prejudice out of here, VeriSign is a legit company.21:29
Fuchspangolin: no, due to legal actions from former passengers. But here is a small bag of salt, for your convenience *hands*21:29
* EvilResistance takes the unsalted peanuts21:29
JanC"please fax the request on a letter with your company logo"21:29
EvilResistancepangolin, i got a box of bags of salted, roasted peanuts.  here you go, have them all21:29
pangolinmuch appreciated21:30
JanCEvilResistance: Verisign has managed to sell Microsoft certs to a third party at least once...  :P21:30
JanCseriously, they are NOT legit21:30
EvilResistanceJanC, idc?21:30
EvilResistancei dont use VeriSign anyways21:31
JanCmany CA are sub-CA of VeriSign21:31
* Fuchs looks at the discussion and sneaks away, whistling innocently21:32
JanCpersonally I prefer a private CA and an out-of-band way to check fingerprints on it21:32
JanCor even a self-signed cert21:32
* EvilResistance pulls Fuchs back here using a graviton beam21:32
EvilResistanceJanC, StartSSL doesnt use VeriSign21:32
EvilResistancethey're their own :p;21:32
* Fuchs bites and walks away again21:32
JanCEvilResistance: but how well do they check SSL cert applications?21:33
EvilResistanceJanC, there's three levels of certs:21:33
EvilResistancedomain only without individual verification21:33
EvilResistanceindividual/owner verification (requires actual personal info)21:33
EvilResistanceand then full verification whcih includes business verification with tax records informations21:34
JanCthat doesn't give me a lot of confidence...  ;)21:34
EvilResistanceand you have to pay for the verification fo rhte first and second21:34
JanConly the last one is maybe legit21:34
EvilResistancethe first one is free, but doesnt actually do anything21:34
EvilResistance(the actual personal info needed includes IRS tax records if you're in the USA, as well as background checks)21:34
JanCEvilResistance: but the first one will be accepted as legit by browsers etc.21:34
EvilResistanceyou know, why yhe hell am I arguing this...21:35
EvilResistanceyou want to not trust SSL, finbe21:35
EvilResistancedont drag people into this argument though21:35
JanCI trust the basics of SSL, I do not trust most CA21:35

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!