dimastopel / certdepot Goto Github PK

• If you want to make it more helpful, on the download page have something like "What next?" and have some pointers to installation/configuration instructions.

http://news.ycombinator.com/item?id=4766743

• You're often too literal, especially given your audience is going to be largely people that find it too complex to do it manually themselves. People don't think of "common names", they think "url" or "hostname".
• Again on the literal front, you've copied the OpenSSL descriptions of OU and stuff and expect the user to know what it is. Fill in sample data or placeholder so that it helps the user figure out what they want, should they want to customize it. Consider removing fields if no one cares.
• Do you even need the second screen? You could just put "domain name" and "secret key passphrase" on the front page and go straight to the download after that

http://news.ycombinator.com/item?id=4766743

http://news.ycombinator.com/item?id=4766743

Just try to generate a certificate named reboot ;- )
It can lead to serious problems, like the stealing of the certificates of other users, and so much more...

All the inputs must be escaped !

@ https://github.com/dimastopel/certdepot/blob/master/routes.js#L154
@ https://github.com/dimastopel/certdepot/blob/master/routes.js#L167

http://news.ycombinator.com/item?id=4766743