Gnus development mailing list
 help / color / mirror / Atom feed
* gwene fingerprint changed
@ 2021-01-11  8:28 Prateek Sadhukhan
  2021-01-11 17:56 ` Robert Pluim
  2021-01-11 18:16 ` James Cloos
  0 siblings, 2 replies; 4+ messages in thread
From: Prateek Sadhukhan @ 2021-01-11  8:28 UTC (permalink / raw)
  To: ding


Hi,

I searched over the net but could not find anything related so here goes.

I access my newsgroups using news.gwene.org. Offlate when I start gnus,
I am getting a message that the fingerprint has changed and whether I want
to still connect. It gives me an option whether I want to accept the
certificate only for this session or permanently etc.

Is this anything to worry about?

Regards,
Prateek




^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: gwene fingerprint changed
  2021-01-11  8:28 gwene fingerprint changed Prateek Sadhukhan
@ 2021-01-11 17:56 ` Robert Pluim
  2021-01-11 18:16 ` James Cloos
  1 sibling, 0 replies; 4+ messages in thread
From: Robert Pluim @ 2021-01-11 17:56 UTC (permalink / raw)
  To: Prateek Sadhukhan; +Cc: ding

Prateek Sadhukhan <psadhukh@gmail.com> writes:

> Hi,
>
> I searched over the net but could not find anything related so here goes.
>
> I access my newsgroups using news.gwene.org. Offlate when I start gnus,
> I am getting a message that the fingerprint has changed and whether I want
> to still connect. It gives me an option whether I want to accept the
> certificate only for this session or permanently etc.
>
> Is this anything to worry about?

That means that the certificate that news.gwene.org has changed, as it
does every 3 months. If the message youʼre getting identifies the
certificate as belonging to gwene.org, then youʼre ok. If not, someone
might be trying to intercept traffic, or thereʼs a misconfigured https
proxy in the middle somewhere.

Robert


^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: gwene fingerprint changed
  2021-01-11  8:28 gwene fingerprint changed Prateek Sadhukhan
  2021-01-11 17:56 ` Robert Pluim
@ 2021-01-11 18:16 ` James Cloos
  2021-01-12  8:12   ` Prateek Sadhukhan
  1 sibling, 1 reply; 4+ messages in thread
From: James Cloos @ 2021-01-11 18:16 UTC (permalink / raw)
  To: Prateek Sadhukhan; +Cc: ding

>>>>> "PS" == Prateek Sadhukhan <psadhukh@gmail.com> writes:

PS> I access my newsgroups using news.gwene.org. Offlate when I start gnus,
PS> I am getting a message that the fingerprint has changed and whether I want
PS> to still connect.

PS> Is this anything to worry about?

no.

they use lets encrypt for the tls certs, which update every two to three
months.  most le clients also create new private keys for each new cert,
to improve security.

it is normal for gnus to make that request every couple of months or so.

-JimC
-- 
James Cloos <cloos@jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6


^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: gwene fingerprint changed
  2021-01-11 18:16 ` James Cloos
@ 2021-01-12  8:12   ` Prateek Sadhukhan
  0 siblings, 0 replies; 4+ messages in thread
From: Prateek Sadhukhan @ 2021-01-12  8:12 UTC (permalink / raw)
  To: ding


Thank you for your responses.

I have accepted it.

Regards,
Prateek


James Cloos <cloos@jhcloos.com> writes:

>>>>>> "PS" == Prateek Sadhukhan <psadhukh@gmail.com> writes:
>
> PS> I access my newsgroups using news.gwene.org. Offlate when I start gnus,
> PS> I am getting a message that the fingerprint has changed and whether I want
> PS> to still connect.
>
> PS> Is this anything to worry about?
>
> no.
>
> they use lets encrypt for the tls certs, which update every two to three
> months.  most le clients also create new private keys for each new cert,
> to improve security.
>
> it is normal for gnus to make that request every couple of months or so.
>
> -JimC



^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2021-01-12  8:12 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-01-11  8:28 gwene fingerprint changed Prateek Sadhukhan
2021-01-11 17:56 ` Robert Pluim
2021-01-11 18:16 ` James Cloos
2021-01-12  8:12   ` Prateek Sadhukhan

Gnus development mailing list

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://inbox.vuxu.org/ding

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V1 ding ding/ http://inbox.vuxu.org/ding \
		ding@inbox.vuxu.org
	public-inbox-index ding

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://inbox.vuxu.org/vuxu.archive.emacs.gnus.general


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git