5 ms·
Signup sends login credentials over HTTP and not HTTPS. Come on guys, it's 2013. A certificate isn't that expensive anymore.
by WA 13y ago
Signup sends login credentials over HTTP and not HTTPS. Come on guys, it's 2013. A certificate isn't that expensive anymore.
- ollydbg 13y agoAgreed on this one, HTTPS is not so hard.
- jpkeisala 13y agoOff topic: Where can I buy cheap certificate?
- michaelmior 13y agoI've used PositiveSSL certificates from Namecheap[1] successfully in the past. I think $7.95/yr is pretty cheap. [1] http://www.namecheap.com/ssl-certificates/comodo/positivessl-certificate.aspx http://www.namecheap.com/ssl-certificates/comodo/positivessl...
- perlgeek 13y agoYou can get your SSL certificate signed for free from http://www.startssl.com/ http://www.startssl.com/ whose CA is included by default in all major browsers. You just have to be able to receive email to webmaster@yourdomain.tld for that to work.
- borski 13y agoStartSSL is a pain in the ass if you're a business, and support sucks. Great for their personal certs. GoDaddy is the cheapest, but I hate them. Use Namecheap.
- gtaylor 13y agoBeen using Namecheap for a number of our client sites. Have been very happy. No BS, just gets the cert to me quickly.
- dangrossman 13y agoYou can't use their free certificates for commercial purposes.
- Hellenion 13y agoI read through startssl's ToS a while back but I'm pretty sure this wasn't in there. Has their policy changed or did I miss something?
- dangrossman 13y agoIt's always been there AFAIK. This is from their current policy document which you must agree to when you start applying for a free certificate: > Class 1 certificates are limited to client and server certificates, whereas the later is restricted in its usage for non-commercial purpose only. Subscribers MUST upgrade to Class 2 or higher level for any domain and site of commercial nature Class 1 is "StartSSL Free", and Class 2 is "StartSSL Verified" which costs $59.90.
- vertis 13y agoGeotrust (RapidSSL) isn't too expensive either.
- deleted 13y ago[deleted]
- foodstances 13y agohttps://www.cheapssls.com/ https://www.cheapssls.com/
- richardw 13y agoNot that off-topic since one of the owners sells certs. http://uptimerobot.com/about http://uptimerobot.com/about
- thesis 13y agohttp://www.servertastic.com http://www.servertastic.com
- Chupachupski 13y agohttps://globessl.com/ https://globessl.com/
- deanpcmad 13y agoI agree. Also one of the guys who started the site runs SSLmatic - http://www.sslmatic.com/ http://www.sslmatic.com/
- dangrossman 13y agoThe extra dedicated IPs often cost more than the certificate.
- farmdawgnation 13y agoDedicates IP's aren't required for SSL certs anymore unless you're concerned with old IE's in Enterprise environments. Every modern piece of browser software will send the domain with the TLS handshake. Doesn't look like these guys are targeting the entrenched enterprise, though.
- dangrossman 13y agoWindows XP is still running on about 1 in 5 computers in the US. Internet Explorer is still the first or second-most used browser depending on whose market share methodology you prefer. SNI does not work with any version of IE on WinXP. SNI also doesn't work with Safari on XP, Android 2.x browser, BlackBerry browser, Opera Mobile, etc. No major sites use SNI and it's not because they have enterprise audiences. The compatibility isn't there yet -- if you're using SNI, you're throwing up errors on the screens of 10% or more of your visitors -- desktop, laptop, home, "enterprise", and mobile alike.
- gabipurcaru 13y agoYou're assuming that the average user on their site = the average user on the internet.
- JaneJDunn 13y agomy classmate's sister makes $63 hourly on the laptop. She has been laid off for seven months but last month her payment was $19170 just working on the laptop for a few hours. browse around this site =======================================================>>> http://www.works23.com http://www.works23.com
- Dylan16807 13y agoGiving error messages to people using IE on XP is probably a good thing. Web browsers need security updates, and they're about to be left out, in addition to facing rendering problems. But even when you want to let people connect without SNI, there is no reason to skimp on security. How about sending people with bad browsers to a different port per site?
- ronaldx 13y agoGenuine questions: why does this service require a login? Why does it require a secure login?
- Stealth- 13y agoYou can tie private information, such as your telephone number (for SMS) and various emails to your account that you can associate with alerts on various reminders you set up. It's bad practice to not use a secure login, because anyone who is sniffing HTTP traffic can see your Uptime Robot username and password in plaintext. This might not be that bad for this website, but keep in mind how many people use the same email/password for other services, or their email.
- Justsignedup 13y agoprefix to my note: dude startssl certificate is fucking free. you should be using a password manager and have unique for every service.
- Stealth- 13y agoI do. Your typical user does not.
- deleted 13y ago[deleted]