William Gathoye

Results 25 comments of William Gathoye

@mg-code We are currently rewriting the Docker implementation for Mautic please be patient :) Btw, this PR is not CLA signed and should be applied after a new directory architecture...

Indeed the only tag we have for the v2 versions is a per release tag like 2.12-apache or 2.12-fpm. We need to provide a fix for this.

@RCheesley There won't be any compatibility breaking changes with what the users **USING** the Docker containers will see. The changes are basically from our side, the devops writing the Dockerfile...

@devinbinnie Thanks for the nudge. Last time I checked, it was indeed cumbersome to modify the way electron-builder was behaving. Let's seeif the situation changed one year later... or if...

Link to discussion on Mattermost: https://community.mattermost.com/core/pl/mc8sdg8patbajres5s6tfwufwy

The code certificates we use have been bought at GoDaddy. Their TSA server (`http://tsa.starfieldtech.com`) [is known to be rate limited](https://www.godaddy.com/community/SSL-And-Security/Blocked-from-http-tsa-starfieldtech-com/td-p/130705). [In the code](https://github.com/mattermost/desktop/blob/master/scripts/Makefile.ps1#L316), we are using `http://timestamp.digicert.com` as TSA server...

Hi @jaydeland > We can potentially move to CloudHSM with AWS: > https://docs.aws.amazon.com/cloudhsm/latest/userguide/signtool-prereqs.html > https://docs.aws.amazon.com/cloudhsm/latest/userguide/signtool-csr.html Except that with [the instructions](https://docs.aws.amazon.com/cloudhsm/latest/userguide/signtool-sign.html), I don't see any call to a [Time Stamping Authority...

Firefox is using Digicert as TSA authority: ![Screenshot_20200422_173003](https://user-images.githubusercontent.com/2997662/80001700-f78bac00-84be-11ea-843b-0c4fd4a4ef7d.png) Google Chrome is using Digicert as well: ![Screenshot_20200422_173240](https://user-images.githubusercontent.com/2997662/80001968-4d605400-84bf-11ea-98b2-2a62e701df31.png) Adobe seems to be using Digicert as well: ![Screenshot_20200422_173441](https://user-images.githubusercontent.com/2997662/80002238-adef9100-84bf-11ea-9efd-b5734f3137ce.png)

So to summarize, it seems there are only two TSA authorities in the world: * Digicert * StarfieldTech, a subsidiary of GoDaddy Since everyone seems to be using Digicert, that's...

Just got confirmation from @cloph via @arnaudversini, the LibreOffice project seems to use this provider for code signing certificates (noticeably cheaper). https://www.certum.eu/en/code-signing-certificates/ And as for the timestamping server being used,...