4 ms·

Quick question, apart from having a prettier website, what's the differentiator with StartSSL which is also free, automated, and open?

gsnedders 11y ago
Certificate revocation for free (which is a big deal!), commercial use for free, multiple hosts for free…
- 0x0 11y ago
  StartSSL might also refuse you if you try to request a certificate on behalf of a friend or a client, as they sometimes checks if WHOIS lines up with your identity validation. Quite the hassle for domain-validated certs :-/
organsnyder 11y ago
Unless things have changed drastically recently (it's been a little while since I've used them), StartSSL is not "open" for any meaningful definition of the word.
eric_bullington 11y ago
StartSSL is not free for any commercial sites, even tiny businesses or personal sites advertising freelance services.
- bluesmoon 11y ago
  We used StartSSL for free when we started LogNormal. We were definitely commercial.
  - schoen 11y ago
    It might not always be enforced in practice, but StartCom's policy doesn't allow use of the free certs for a commercial purpose: > Class 1 certificates are limited to client and server certificates, whereas the later is restricted in its usage for non-commercial purpose only. Subscribers MUST upgrade to Class 2 or higher level for any domain and site of commercial nature, when using high-profile brands and names or if involved in obtaining or relaying sensitive information such as health records, financial details, personal information etc. https://www.startssl.com/policy.pdf https://www.startssl.com/policy.pdf
janfoeh 11y ago
I've used StartSSL for my last three customer projects, only because they offer cheap wildcard certs. I for one cannot wait to never have to use them again: * validation taking up to six weeks, with recurring ridiculous demands for documentation, such as energy provider bills etc * very unpleasant interface * nightmarish authentication scheme with client-side certs. Try signing on with Chrome on one box, then exporting the cert to Firefox on another for example * the client-side cert expires. When it does, there is no way to get back into your account. Support says 'just make a new one' * there doesn't seem to be a mechanism for designating a technical contact, and I've been admonished by them several times for having the gall of taking over the process for my customers

gsnedders 11y ago

Certificate revocation for free (which is a big deal!), commercial use for free, multiple hosts for free…

0x0 11y ago
StartSSL might also refuse you if you try to request a certificate on behalf of a friend or a client, as they sometimes checks if WHOIS lines up with your identity validation. Quite the hassle for domain-validated certs :-/

organsnyder 11y ago

Unless things have changed drastically recently (it's been a little while since I've used them), StartSSL is not "open" for any meaningful definition of the word.

eric_bullington 11y ago

StartSSL is not free for any commercial sites, even tiny businesses or personal sites advertising freelance services.

bluesmoon 11y ago
We used StartSSL for free when we started LogNormal. We were definitely commercial.
- schoen 11y ago
  It might not always be enforced in practice, but StartCom's policy doesn't allow use of the free certs for a commercial purpose: > Class 1 certificates are limited to client and server certificates, whereas the later is restricted in its usage for non-commercial purpose only. Subscribers MUST upgrade to Class 2 or higher level for any domain and site of commercial nature, when using high-profile brands and names or if involved in obtaining or relaying sensitive information such as health records, financial details, personal information etc. https://www.startssl.com/policy.pdf https://www.startssl.com/policy.pdf

janfoeh 11y ago

I've used StartSSL for my last three customer projects, only because they offer cheap wildcard certs. I for one cannot wait to never have to use them again: * validation taking up to six weeks, with recurring ridiculous demands for documentation, such as energy provider bills etc * very unpleasant interface * nightmarish authentication scheme with client-side certs. Try signing on with Chrome on one box, then exporting the cert to Firefox on another for example * the client-side cert expires. When it does, there is no way to get back into your account. Support says 'just make a new one' * there doesn't seem to be a mechanism for designating a technical contact, and I've been admonished by them several times for having the gall of taking over the process for my customers