4 ms·
May be worth mentioning a tip I learned on an earlier HN thread: https://www.startssl.com/ https://www.startssl.com/ provide single-domain standard SSL certs fo
by gmac 16y ago
May be worth mentioning a tip I learned on an earlier HN thread: https://www.startssl.com/ https://www.startssl.com/ provide single-domain standard SSL certs for free, and look considerably cheaper than GoDaddy for the UCC certificates discussed here.
- johnny22 16y agothat doesn't help if you still want folks who use IE on XP to connect to your site with SSL, since you can't rely on SNI in that instance. The key part was the "1 ip address"
- agl 16y agoMultiple names in the certificate isn't the same as SNI. The server is still giving the same certificate to every client so SNI support isn't needed and XP clients will work.
- johnny22 16y agoi know, i saying that getting multiple single domain certificates won't fit the bill. That's why a UCC was needed
- agl 16y agoIf you only need a certificate for (www).domain.com, (not a certificate with multiple names as detailed in the story) then here are step-by-step instructions for getting a free certificate from StartSSL: https://github.com/ioerror/duraconf/blob/master/startssl/README.markdown https://github.com/ioerror/duraconf/blob/master/startssl/REA...
- leej 16y agoDo StartSSL issued free 1-domain certificates valid for all major desktop and mobile browsers? Can anyone confirm this? Most cert providers claim almost always 99% and above comptability but they dont claim any percent value on their website.
- eli 16y ago99 percent of what? Browsers ever made? Visitors to your site? I read that Microsoft added the StartCom CA to Windows in 2009. So I would assume that people browsing the web with ancient, unpatched versions of IE will have problems. How big a deal that is probably depends on your site.
- leej 16y agoi'm assuming you're not joking. it's "browser recognition" and this value is generally 99.9% for paid providers.