4 ms·
StartSSL is the opposite of user friendly.
by crisnoble 11y ago
StartSSL is the opposite of user friendly.
- broodbucket 11y agoHere's a cert! Hopefully you still have it around somewhere when you try to renew in a year!
- josteink 11y agoThey specifically tell you that you need to back up your login-cert or you will lose access. One year passed, and I checked my backups. Yup, there it was. If you take security seriously, you should actually read what's on the page instead of clicking "next, next, next" like some driveby malware-installing Windows-installer. And then this shouldn't be an issue. I guess this is StartSSL's way of not having to deal with people who don't take security as seriously as they do.
- throwaway_96 11y ago> take security as seriously as they do. StartSSL doesn't take security serious. They'll happily accept breaches to their terms of use, as long as you pay up.
- broodbucket 11y agoThe rest of the connected world has determined that username and password, supplemented by OTP methods or some other multifactor authentication, is enough. Having a login cert is fine if the "user" is an organisation. It is a broken model for individuals or small businesses.
- creshal 11y agoWe'll send you a cert in an hour after manually verifying for no reason! – StartSSL, four months ago.
- makomk 11y agoThe best part is, the cert you use to log in to your account itself expires after a year. So if you don't renew it in time you lose the ability to log in and issue a new certificate for your site, right at around the time your site's certificate expires.