3 ms·

Nice find! But given the amount of hassle to get one, your hourly rate must be very low. But I'm sure it will be the future to get near-0$ DV-certificates. It'

by rmoriz 12y ago

Nice find! But given the amount of hassle to get one, your hourly rate must be very low. But I'm sure it will be the future to get near-0$ DV-certificates. It's a pity no CA besides StartCom and Comodo pick up the S/MIME market. Both options are not very usable for non-IT people.

thejosh 12y ago
Cloudflare offer free SSL now, so if you are small and can't afford a certificate, they could be a good choice.
- rmoriz 12y ago
  S/MIME != SSL http://en.wikipedia.org/wiki/S/MIME http://en.wikipedia.org/wiki/S/MIME
  - Nostromov 12y ago
    Yes, that would be @ https://en.wikipedia.org/wiki/S/MIME https://en.wikipedia.org/wiki/S/MIME (ffs, lol; we're talkin' about SSL :))
    - rmoriz 12y ago
      No we were talking about X509 certificates
- grakic 12y ago
  Cloudflare Univeral SSL uses SNI https://support.cloudflare.com/hc/en-us/articles/203041594-What-browsers-work-with-Universal-SSL- https://support.cloudflare.com/hc/en-us/articles/203041594-W...
  - thejosh 12y ago
    Sure, but looking at: Current inclusion status in major CA certificate stores: Included by default in NSS 3.16.3 or newer (Mozilla Firefox 32+). Included by default in Microsoft Windows since September 2014 on Windows Vista+ (should automatically update as mentioned here). Included by default in Android 5.0+ (no source, but on my Nexus tablet with Android 4.4.4 it is not yet included but on my Nexus phone with Android 5.0 it is) It is not yet included in the Apple certificate store. This is not a big issue however, since the WoSign root CA is cross-signed by the StartCom CA which itself is included almost everywhere since >5 years. SNI isn't included in Windows XP, yet the SSL won't work in XP anyway.
iancarroll 12y ago
> It's a pity no CA besides StartCom and Comodo pick up the S/MIME market. A lot of CAs sell S/MIME certs, including GlobalSign and CyberTrust. They're not heavily advertised, though.

by rmoriz 12y ago

thejosh 12y ago

Cloudflare offer free SSL now, so if you are small and can't afford a certificate, they could be a good choice.

rmoriz 12y ago
S/MIME != SSL http://en.wikipedia.org/wiki/S/MIME http://en.wikipedia.org/wiki/S/MIME
- Nostromov 12y ago
  Yes, that would be @ https://en.wikipedia.org/wiki/S/MIME https://en.wikipedia.org/wiki/S/MIME (ffs, lol; we're talkin' about SSL :))
  - rmoriz 12y ago
    No we were talking about X509 certificates
grakic 12y ago
Cloudflare Univeral SSL uses SNI https://support.cloudflare.com/hc/en-us/articles/203041594-What-browsers-work-with-Universal-SSL- https://support.cloudflare.com/hc/en-us/articles/203041594-W...
- thejosh 12y ago
  Sure, but looking at: Current inclusion status in major CA certificate stores: Included by default in NSS 3.16.3 or newer (Mozilla Firefox 32+). Included by default in Microsoft Windows since September 2014 on Windows Vista+ (should automatically update as mentioned here). Included by default in Android 5.0+ (no source, but on my Nexus tablet with Android 4.4.4 it is not yet included but on my Nexus phone with Android 5.0 it is) It is not yet included in the Apple certificate store. This is not a big issue however, since the WoSign root CA is cross-signed by the StartCom CA which itself is included almost everywhere since >5 years. SNI isn't included in Windows XP, yet the SSL won't work in XP anyway.

iancarroll 12y ago

> It's a pity no CA besides StartCom and Comodo pick up the S/MIME market. A lot of CAs sell S/MIME certs, including GlobalSign and CyberTrust. They're not heavily advertised, though.