4 ms·
Free SSL certificates are completely undermining Internet security. The whole point of certs is that you have a certificate authority that verifies the identit
by steven2012 12y ago
Free SSL certificates are completely undermining Internet security. The whole point of certs is that you have a certificate authority that verifies the identity of the person you are issuing the cert to. By giving it away for free and doing zero of the backend work, all you're doing is creating a false sense of security and poisoning the ability to trust https.
- akerl_ 12y agoYes, because the paid cert industry has a long history of preventing people from pretending to be other entities.
- Pyramids 12y agoAs it stands, the majority of CA's do not verify any of this information, besides a very cursory email verification. Exceptions would obviously include higher priced (OV/EV) certificates, which are no different cryptographically. Even the CA mentioned (GlobalSign) states this fairly clearly on their website.[1] [1] https://www.globalsign.com/ssl-information-center/types-of-ssl-certificate.html https://www.globalsign.com/ssl-information-center/types-of-s...
- iancarroll 12y agoSo they should pay to make it more secure? It's not like you get to skip domain validation.
- indusface 12y agoThe SSL protocol uses digital certificates to create a secure, confidential communications "pipe" between two entities. Data transmitted over an SSL connection cannot be tampered with or forged without the two parties becoming immediately aware of the tampering. This Free concept is really bogus. Nothing comes free! http://www.indusface.com/index.php/products/ssl-certificates http://www.indusface.com/index.php/products/ssl-certificates