[Galene] Re: Heads up: Galène generates self-signed certificates

[Juliusz Chroboczek <jch@irif.fr>]

> The CA authority argument has always smelt of the old key escrow argument

Not in this case, I don't think so -- it's just another way for some folks
to make heaps of money.

> I however wouldn't mind if that there was a command within galene to
> fire off the lets encrypt facility if a box is on the public internet
> and has working dns. shell out to acme, I think....

There is a Go library to do that, and it wouldn't be difficult to
integrate.  However, that would require being able to listen on port 443,
which is probably more trouble then it's worth.

As to shelling out, recall that we're supposed to be portable to Windows,
and Windows users are the ones most likely to be confused if the behaviour
is different depending on platform.

-- Juliusz