4 ms·

None of this has anything to do with StartSSL's trustworthiness as a CA. It is ridiculous to see that people are whining that a company that signed their cert

by dfc 13y ago

None of this has anything to do with StartSSL's trustworthiness as a CA. It is ridiculous to see that people are whining that a company that signed their cert for $0.00 is asking for some money for additional work. The $25 rekeying is a steal for a certificate. What CA in mozilla/chromium comes closest to StartSSL's $0.00 or $25.00 certificate? That question is not rehetorical, I am genuinely curious what is the second cheapest option for a signed certificate (from a CA trusted by default in mozilla/chromium).

yeukhon 13y ago
https://www.gandi.net/ssl/standard#single https://www.gandi.net/ssl/standard#single $16 per year. edit Someone said reseller namecheap and ssls are way cheaper and have the same trust as any CA.
- Spidler 13y ago
  Gandi are free if you have domain hosting with them.
  - yeukhon 13y ago
    Yes, but as a customer my SSL is only free for one year :)
aroch 13y ago
PossitiveSSL2 (Comodo) through a reseller (I use http://cheapsslsecurity.com/ http://cheapsslsecurity.com/ -- $5/year/5years)
- dfc 13y ago
  I was thinking about the two Comodo RAs (or three?) that had been compromised when I said from a CA trusted by mozilla/chromium: https://bugzilla.mozilla.org/show_bug.cgi?id=470897 https://bugzilla.mozilla.org/show_bug.cgi?id=470897 https://bugzilla.mozilla.org/show_bug.cgi?id=526560 https://bugzilla.mozilla.org/show_bug.cgi?id=526560 https://bugzilla.mozilla.org/show_bug.cgi?id=599856 https://bugzilla.mozilla.org/show_bug.cgi?id=599856
  - aroch 13y ago
    They're in both browser's truststores. That's about as "trusted" a CA can be by an inanimate object. For a CA that issues hundreds of thousands of certs, three instances of mistakes is not damning. Whereas a CA, like STartCom, that boldly proclaim to be the second coming of CA-Jesus and gives away certs for free and relies on predatory charges (pay high fees when you're in trouble) is.
    - dfc 13y ago
      cheapsslsecurity is not a CA, so we can hopefully agree that this does not count as "from a CA"? Comodo Free 90-day Certificate: https://www.comodo.com/e-commerce/ssl-certificates/free-ssl-certificate.php https://www.comodo.com/e-commerce/ssl-certificates/free-ssl-...
      - aroch 13y ago
        They're a reseller, if you took the 20sec it took you to make asinine replies to actually look you would see that they sell Comodo, Thwate, and Verisign certs. But thank you for your useful commentary.
        dfc 13y ago
        What was asinine about my comment? I knew cheapsslsecurity was a reseller and I specifically said "from a CA" in my initial comment and then again in my first reply to you. I said from a CA because I was thinking about Comodo and their RAs history of awesomeness. What is the significance of the fact that they also resell other companies certificates?

by dfc 13y ago

yeukhon 13y ago

https://www.gandi.net/ssl/standard#single https://www.gandi.net/ssl/standard#single $16 per year. edit Someone said reseller namecheap and ssls are way cheaper and have the same trust as any CA.

Spidler 13y ago
Gandi are free if you have domain hosting with them.
- yeukhon 13y ago
  Yes, but as a customer my SSL is only free for one year :)

aroch 13y ago

PossitiveSSL2 (Comodo) through a reseller (I use http://cheapsslsecurity.com/ http://cheapsslsecurity.com/ -- $5/year/5years)

dfc 13y ago
I was thinking about the two Comodo RAs (or three?) that had been compromised when I said from a CA trusted by mozilla/chromium: https://bugzilla.mozilla.org/show_bug.cgi?id=470897 https://bugzilla.mozilla.org/show_bug.cgi?id=470897 https://bugzilla.mozilla.org/show_bug.cgi?id=526560 https://bugzilla.mozilla.org/show_bug.cgi?id=526560 https://bugzilla.mozilla.org/show_bug.cgi?id=599856 https://bugzilla.mozilla.org/show_bug.cgi?id=599856
- aroch 13y ago
  They're in both browser's truststores. That's about as "trusted" a CA can be by an inanimate object. For a CA that issues hundreds of thousands of certs, three instances of mistakes is not damning. Whereas a CA, like STartCom, that boldly proclaim to be the second coming of CA-Jesus and gives away certs for free and relies on predatory charges (pay high fees when you're in trouble) is.
  - dfc 13y ago
    cheapsslsecurity is not a CA, so we can hopefully agree that this does not count as "from a CA"? Comodo Free 90-day Certificate: https://www.comodo.com/e-commerce/ssl-certificates/free-ssl-certificate.php https://www.comodo.com/e-commerce/ssl-certificates/free-ssl-...
    - aroch 13y ago
      They're a reseller, if you took the 20sec it took you to make asinine replies to actually look you would see that they sell Comodo, Thwate, and Verisign certs. But thank you for your useful commentary.
      - dfc 13y ago
        What was asinine about my comment? I knew cheapsslsecurity was a reseller and I specifically said "from a CA" in my initial comment and then again in my first reply to you. I said from a CA because I was thinking about Comodo and their RAs history of awesomeness. What is the significance of the fact that they also resell other companies certificates?