I would like to suggest merging the ssl and tls tags on StackOverflow. I made that suggestion a while back on the synonyms page, but there are probably there have been no votes on the topic (possibly, because to few users check this). (For those who don't know, TLS is the IETF standard name for what SSL used to be. They're mainly different versions of the same thing.)
There's one slight problem because tls has been used a few times to talk about "thread local storage", despite its wiki description referring to the IETF TLS RFC. Perhaps those could be re-tagged with thread-local (EDIT: I've just realised there is a thread-local-storage tag already, probably better). (I don't mind doing some re-tagging if necessary.)
We could also merge dtls (the datagram variant of TLS) into this tag this there are only 4 questions with that tag.
I would prefer not to merge https into it if possible. I know it's been done on other sites, but sometimes I think it would have been better not to (e.g. on Security.SE). It makes sense to do it on Webmasters.SE (since it's about HTTP anyway), but I think it's good to keep certain tags separate. SSL/TLS isn't necessarily about HTTPS (even though it's quite common). It's not particularly harmful to keep certain topic separate (e.g. for those who want to look for databases or ldap and ssl without being overwhelmed by the https questions).
Another one that could be merged into ssl would be ssl-certificate. It's possible to use SSL/TLS without certificates, but it's a much rarer occurrence than using SSL/TLS with protocols other than HTTP as far as I'm aware.
Following that path, there's a question of merging x509certificate into it. I would suggest not to. X.509 certificates can be used for other purposes, including S/MIME and code signing. Merging all that into SSL/TLS wouldn't make sense. Strangely, the tag description for x509certificate refers to the X509Certificate
classes in .Net and Java rather than the implementation-agnostic concept of X.509 certificate. x509 could probably be merged with it.
There's also certificate on its own, but that's an even wider field: it could be X.509 certificate, OpenPGP certificates, or even (although quite rare) proxy certificate (RFC 3820), Attribute Certificates, ... Hence, it's probably better not to merge that with the rest.
I think it would definitely make sense to merge pkix (only 2 questions) with pki.
(EDIT: I'm editing this to try to reflect the feedback from the answers.)
In summary, I would like to suggest the following mergers:
- ssl, tls could be merged into a tag called ssl-tls.
- dtls should stay on its own
- x509certificate, x509 could be merged into x.509.
- certificate, certificates and digital-certificate could be merged
- Leaving https alone
- Leaving pki alone
- Leaving pkix alone
- Leaving client-certificates alone
- Leaving code-signing-certificate alone
- Leaving certificate-authority alone
- Leaving certificate-revocation alone
- Possibly re-tagging every ssl-certificate questions with x.509 + ssl?
Of course, these are just suggestion. I know there normally is a suggestion process via the synonyms page, but I'm not sure there's enough traffic on those pages.
EDIT:
As Eugene suggested, we could get rid of ssl-certificate, since it's indeed not the correct term. (It's a very common expression, though.)
I'm not sure about merging "X.509 certificate" with "certificate". Just in case people were referring to other types of certificates. I know few people refer to PGP public keys as certificate, but if they did, they'd probably understand better why they're signed.
Merging x509certificate into x.509 would make x509certificate lose its tag descriptions specific to Java/.Net implementations. I think this makes sense since it's the way it's used anyway. I'm not sure what to do about x509certificate2 in this context (X509Certificate2
is a subclass of X509Certificate
is .Net, which allows a private key to be associated with the certificate, amongst other things).
EDIT 2:
Any ideas about starttls?