[OSM-dev] Protecting the login pages

[Nick Burch]

On Mon, 3 Jul 2006, SteveC wrote:
> https seems sensible to me. I've done self-generated certs before but 
> not bought one. Any suggestions?

I'd say to go with CACert to start with. It's free, but not in browsers by 
default (though some linux distros do add it in). If enough people 
complain, only then buy one.

Otherwise, stay away from the big name CAs. They don't offer anything that
the small commercial CAs don't offer, other than an inflated price tag!

Nick