5 ms·
Although I absolutely agree with your whole comment, I would just like to add one point. If you doing online business, and successfully, the yearly charge shou
by bsdbuddy 16y ago
Although I absolutely agree with your whole comment, I would just like to add one point.
If you doing online business, and successfully, the yearly charge shouldn't be such an issue. However, for non-profit websites its absolutely out of the question. I'm curious - as your customers aren't demanding SSL what industry are you in?
- fierarul 16y agoWell, the yearly charge isn't such an issue, but I cringe knowing I could pay a small server for an year of uptime with the money I pay for an SSL cert, which is essentially an official stamp of a member of the CA oligarchy. I mostly do contract work so I don't need SSL on my front-facing sites. We do use sites that have SSL to send deliverables and such, but I just pay for their service, not for the cert itself. Internally we've also used self-signed certs, our own CA or just SSH port forwarding. As an industry we should move towards encription but away from the current CA model. Somehow everybody portrays it as if it's the same thing.
- T-hawk 16y agoEncryption in itself does little good without a certification authority model. Without a mathematically robust CA chain, you never know if you're sending your encrypted traffic to your intended target or to a man-in-the-middle attacker pretending to be your target. Encryption protects against a passive sniffer but not a party capable of intercepting messages.