5 ms·

actually you can get alphassl for $40-50 as well. Comodo is pretty good for the price range. You can pay a bit more for a GeoTrust or an arm and a leg for Thawt

actually you can get alphassl for $40-50 as well. Comodo is pretty good for the price range. You can pay a bit more for a GeoTrust or an arm and a leg for Thawte or VeriSign, but there is no difference between all these SSL. It's purely marketing BS.

jacquesm 14y ago
> It's purely marketing BS. It's worse than that. SSL certificates are simply just another racket, and they're a lot more expensive than domain names. There is no added value from having a certificate from some authority or other beyond the knowledge that your bits are encrypted, the checks performed (even for the high end ones) are perfunctory and users put far more trust into little lock icons or green bars than is warranted. That said, if your cert provider is hacked it can be a real pain.
- aioprisan 14y ago
  I agree, although having one from a trusted authority is better than not having one. And customers come to expect that you have SSLs installed. Never mind if the data at rest is actually encrypted..
taneliv 14y ago
Their site has them at $149 (single domain certs are $49). StartSSL offers the wildcard ones at $59. Like Comodo, not everyone trusts them (however, browsers do). Would be delighted to learn of a cheaper wildcard cert.
- aioprisan 14y ago
  Yes, even RSA had it's share of breaches. From a customer perspective, it'll show the lock even on mobile devices, which I've found others to be lacking in (looking at you, RapidSSL)
  - fomojola 14y ago
    Had similar problems with RapidSSL (not the wildcards, the regular ones) and it turned out you have to include a cross root CA that chains to a Geotrust intermediate CA (my terminology may not be quite right, but it certainly worked for me). Its been a while since I did it but there's a pointer on how to get it done here: http://support.servertastic.com/rapidssl-and-geotrust-certificate-not-trusted-on-mobile-device/ http://support.servertastic.com/rapidssl-and-geotrust-certif...

jacquesm 14y ago

> It's purely marketing BS. It's worse than that. SSL certificates are simply just another racket, and they're a lot more expensive than domain names. There is no added value from having a certificate from some authority or other beyond the knowledge that your bits are encrypted, the checks performed (even for the high end ones) are perfunctory and users put far more trust into little lock icons or green bars than is warranted. That said, if your cert provider is hacked it can be a real pain.

aioprisan 14y ago
I agree, although having one from a trusted authority is better than not having one. And customers come to expect that you have SSLs installed. Never mind if the data at rest is actually encrypted..

taneliv 14y ago

Their site has them at $149 (single domain certs are $49). StartSSL offers the wildcard ones at $59. Like Comodo, not everyone trusts them (however, browsers do). Would be delighted to learn of a cheaper wildcard cert.

aioprisan 14y ago
Yes, even RSA had it's share of breaches. From a customer perspective, it'll show the lock even on mobile devices, which I've found others to be lacking in (looking at you, RapidSSL)
- fomojola 14y ago
  Had similar problems with RapidSSL (not the wildcards, the regular ones) and it turned out you have to include a cross root CA that chains to a Geotrust intermediate CA (my terminology may not be quite right, but it certainly worked for me). Its been a while since I did it but there's a pointer on how to get it done here: http://support.servertastic.com/rapidssl-and-geotrust-certificate-not-trusted-on-mobile-device/ http://support.servertastic.com/rapidssl-and-geotrust-certif...