4 ms·
Stop supporting the SSL cartel. Just use StartSSL. Free or $60 for two years if you need subdomain wildcards. http://www.startssl.com/?app=40 http://www.star
by ck2 12y ago
Stop supporting the SSL cartel.
Just use StartSSL.
Free or $60 for two years if you need subdomain wildcards.
http://www.startssl.com/?app=40 http://www.startssl.com/?app=40
- currysausage 12y agoNB: On p. 12, section 3.1.2.1, the policy [1] states: Class 1 certificates are limited to client and server certificates, whereas the later is restricted in its usage for non-commercial purpose only. Subscribers MUST upgrade to Class 2 or higher level for any domain and site of commercial nature, when using high-profile brands and names or if involved in obtaining or relaying sensitive information such as health records, financial details, personal information etc. [1] http://www.startssl.com/policy.pdf http://www.startssl.com/policy.pdf
- Ao7bei3s 12y agoAnd $24.90 if you need a certificate revoked. Very helpful. Not. Also, isn't there any CA that gives away wildcard certs for free? It's the only reason I'm sticking with CACert...
- ck2 12y agoTheir $140 EV certs do not have revocation fees. http://www.startssl.com/?app=37 http://www.startssl.com/?app=37 Revocations carry a handling fee, except for Extended Validation SSL Certificates
- nailer 12y agoStartSSL oddload additional work for your lawyer or accountant so they can skip some EV steps. In turn, you get to pay for their billable hours: http://www.startssl.com/extended-validation-application-request-en.pdf http://www.startssl.com/extended-validation-application-requ...
- detaro 12y agoDon't use StartSSL, they are shady and often a hassle to deal with. If you don't need EV certs, hope that "let's encrypt" comes of the ground quickly.
- mhb 12y agoThat has not been my experience. What issues did you have?
- mikemaccana 12y agoMike from CertSimple here (using old openid account as my other one is replying too fast): StartSSL don't do EV (edit: they do, just not for $60). We only do EV, since we actually identifying companies is how SSL should have always been. $60 is way too much to pay for non-EV, an automated process that doesn't check who you are. If you want a non-EV certificate, wait a couple of months and use https://letsencrypt.org https://letsencrypt.org
- mhb 12y agoStartSSL don't do EV They say they do. See the page http://www.startssl.com/?app=40 http://www.startssl.com/?app=40
- mikemaccana 12y agoYou're right. Edited.