3 ms·

Let's see... * IPv4 addresses are NOT free by any means. * Having an SSL certificate requires extra configuration on the server. * Legitimate SSL certificate

Let's see... * IPv4 addresses are NOT free by any means. * Having an SSL certificate requires extra configuration on the server. * Legitimate SSL certificates are not free (VeriSign, etc, if your site uses StartCom then you're doing it wrong) That's just a few points.

spindritf 15y ago
> * IPv4 addresses are NOT free by any means. You can use SNI but you probably have one website and one certificate for all customers anyway. > if your site uses StartCom then you're doing it wrong Why? (honest question)
- icebraining 15y ago
  SNI doesn't work on IE on XP. It's still a big market, unfortunately.
- RKearney 15y ago
  >Why? (honest question) I meant to say StartSSL, which is the free SSL certificate provider. As far as I'm aware, their free certificated come with no warranty of any kind (although I could be wrong). Depending on how large your business is, you would more than likely go with a trusted brand such as VariSign/GeoTrust/Thawte. Although for small projects, they're more than fine if all you care about is quickly and cheaply securing transmissions.
  - RyanGWU82 15y ago
    I brought StartSSL to my last 2 employers for internal sites, like development sites and internal apps, and it's been wonderful. We haven't found any problems with StartSSL certificates in browsers, from IE6 up through the newest browsers. We've considered using StartSSL for our public sites too, but haven't done so yet. Do customers really care about the name brand or "warranty" of the SSL certificate? What percentage of customers are even aware of who issued your certificate, and do those customers really have concerns about StartCom? This sounds like the argument we heard from DynDNS salespeople last year, about how our customers expect us to be using "enterprise" vendors, rather than "consumer-grade" vendors like Amazon Web Services. Even our savviest customers have never asked us who our DNS provider was.
- drzaiusapelord 15y ago
  >You can use SNI and lose all your IE on XP viwers and all your non-Honeycomb/ICS android viewers? All your 3.x iOS users? All your blackberry users? Are there any large sites using SNI to handle SSL queries? I'd love to hear about their experiences.

spindritf 15y ago

> * IPv4 addresses are NOT free by any means. You can use SNI but you probably have one website and one certificate for all customers anyway. > if your site uses StartCom then you're doing it wrong Why? (honest question)

icebraining 15y ago
SNI doesn't work on IE on XP. It's still a big market, unfortunately.
RKearney 15y ago
>Why? (honest question) I meant to say StartSSL, which is the free SSL certificate provider. As far as I'm aware, their free certificated come with no warranty of any kind (although I could be wrong). Depending on how large your business is, you would more than likely go with a trusted brand such as VariSign/GeoTrust/Thawte. Although for small projects, they're more than fine if all you care about is quickly and cheaply securing transmissions.
- RyanGWU82 15y ago
  I brought StartSSL to my last 2 employers for internal sites, like development sites and internal apps, and it's been wonderful. We haven't found any problems with StartSSL certificates in browsers, from IE6 up through the newest browsers. We've considered using StartSSL for our public sites too, but haven't done so yet. Do customers really care about the name brand or "warranty" of the SSL certificate? What percentage of customers are even aware of who issued your certificate, and do those customers really have concerns about StartCom? This sounds like the argument we heard from DynDNS salespeople last year, about how our customers expect us to be using "enterprise" vendors, rather than "consumer-grade" vendors like Amazon Web Services. Even our savviest customers have never asked us who our DNS provider was.
drzaiusapelord 15y ago
>You can use SNI and lose all your IE on XP viwers and all your non-Honeycomb/ICS android viewers? All your 3.x iOS users? All your blackberry users? Are there any large sites using SNI to handle SSL queries? I'd love to hear about their experiences.