Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:99979
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain garfieldtech.com from 66.111.4.25 cause and error)
To: internals@lists.php.net
References: <CA+aNembkpeU+vTX0dr1r_NuPZkKu4Da2rMTbS3RWk2eSacF_KA@mail.gmail.com>
 <CAESVnVrCndhLSuxZzNp5xqQLp8SC0wGSDAq8cjH+fRew-cCf1g@mail.gmail.com>
 <CANUQDCjB9UY8jTmmp43bQAW_9xJnoMbREN1zOQh1LubTfO4C-w@mail.gmail.com>
 <CACXBjuiL_=-qy53BWbB31_t_XJXqBguwVToS9bV=2K2np+zaRA@mail.gmail.com>
 <CANUQDCjPwMUXjkn2LB7oZsY8ifwBAFjdaQpR6kzt9usSMnQjXw@mail.gmail.com>
 <CACXBjuhef8nvOrL+L9m9jAtxDAMn3fo0VfFDYoi+pr6eg8Ys4w@mail.gmail.com>
Message-ID: <c7d25734-771a-7e96-6ee8-afc75f7b3b55@garfieldtech.com>
Date: Thu, 20 Jul 2017 14:25:08 -0500
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <CACXBjuhef8nvOrL+L9m9jAtxDAMn3fo0VfFDYoi+pr6eg8Ys4w@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Content-Language: en-US
Subject: Re: [PHP-DEV] php.net website
From: larry@garfieldtech.com (Larry Garfield)

On 07/20/2017 12:38 PM, Rasmus Lerdorf wrote:
> On Thu, Jul 20, 2017 at 1:42 AM, Niklas Keller <me@kelunik.com> wrote:
>> They can also just request them themselves, but only for their mirror
>> domain. If you allow them to issue for www.php.net, you can as well just
>> put the current private key there.
>>
> I think there is a big difference between putting the private key there and
> proxying validation for just a www.php.net CN alias. We already have a list
> of known mirrors, so we would make sure to only validate www.php.net for
> those. By validating www.php.net we allow any mirror to pretend they are
> www.php.net and no other *.php.net domain, which is exactly what we want.
>
> -Rasmus

I figure this is a long-shot, but Platform.sh hosts a number of
community sites for free.  (We recently became the home of
https://externals.io/, for example.)  We have multiple data centers and
SSL-all-the-things using Lets Encrypt.  We'd be happy to help on the
hosting side of the equation for any *.php.net sites if there's
interest, either full or partial.  We also offer PHP 7.1 and will have
the just-released 7.2 beta up shortly. :-)

(We have no opinion on the code side; we're just happy to help on the
infrastructure side.)

--Larry Garfield