3 ms·
They can even be picked up for free. At least one commercial CA issues free certificates as a matter of routine and (unlike CAcert) has its root certificate in
by quasque 12y ago
They can even be picked up for free.
At least one commercial CA issues free certificates as a matter of routine and (unlike CAcert) has its root certificate in all major OSes and browsers.
Alternatively, if you already have a paid cert then some providers offer a free cert via 'competitive upgrade' programmes, if you switch to them (rather unethically, this also used to work to freely upgrade short-term trial certificates to full ones).
- abritishguy 12y agoStartcom charge for revocations though, which IMO is a very bad thing.
- quasque 12y agoThey do, but I'm not convinced that it matters - I'd be very surprised if there's any overlap between websites that use the free StartSSL cert, and websites that are worth the effort of hijacking the cert and MITMing.