3 ms·

$469 USD per year? (EDIT: The actual price is $234/yr, as clarified by mike below) GeoTrust sells them for $125/yr[1]. Also a friendly reminder to everyone: L

by moe 12y ago

$469 USD per year? (EDIT: The actual price is $234/yr, as clarified by mike below) GeoTrust sells them for $125/yr[1]. Also a friendly reminder to everyone: Letsencrypt[2] will launch in mid-2015. From that point onwards SSL certificates are free. [1] https://www.ssls.com/geotrust-ssl-certificates/true-businessid-with-ev.html https://www.ssls.com/geotrust-ssl-certificates/true-business... [2] https://letsencrypt.org/ https://letsencrypt.org/

mikemaccana 12y ago
Mike from CertSimple here, from my old openid account (as I'm replying too fast with my other one): > $469 USD per year? No. All certificates are two years - the big price is the total. I've made this more apparent on the front page. If someone wants a non-EV cert we also recommend https://letsencrypt.org https://letsencrypt.org We could easily sell non-EV certs - they can be generated in seconds as they don't require manual ID verification to make a quick buck, but I think poor identity verification is what got SSL into the current mess we're in. You'll note GitHub, Stripe, Mozilla and npm have EV certs. Make of that what you will. Unfortunately letsencrypt doesn't do EV certs. We compared Symantec (whose brands include GeoTrust) when deciding on a CA partner. We picked Digicert based on the issuance speed and business practices. Symantec upsell IE5-level export encryption as a security feature. We don't want to support that. The CA we chose to partner with - Digicert - who we have the same prices as - sits in the middle of the market. They makes the certs for GitHub, Facebook, Intel, Yahoo, and Nintendo.
- moe 12y ago
  We compared [..] GeoTrust [..] when deciding on a CA partner. [...] Symantec upsell IE5-level export encryption as a security feature. We don't want to support that. Didn't you rather mean to say "The DigiCert referral program pays us much better than GeoTrust"? Or would GeoTrust somehow force you to participate in that IE5 upsell if you were to sell their EV-certs instead of DigiCerts?
  - mikemaccana 12y ago
    No, not really. I have code written for the Comodo API from before I spoke to Digicert. I would get a MUCH larger cut for that than I do Digicert. > Or would GeoTrust somehow force you to participate in that IE5 upsell if you were to sell their EV-certs instead of DigiCerts? Yes. The Symantec reseller agreement (remember, GeoTrust is a brand not a company) explicitly forbids you from contradicting their marketing. Also: part of doing good in the world in not supporting people who trick others.
Buge 12y ago
EV certificates will not be free.

by moe 12y ago

mikemaccana 12y ago

Mike from CertSimple here, from my old openid account (as I'm replying too fast with my other one): > $469 USD per year? No. All certificates are two years - the big price is the total. I've made this more apparent on the front page. If someone wants a non-EV cert we also recommend https://letsencrypt.org https://letsencrypt.org We could easily sell non-EV certs - they can be generated in seconds as they don't require manual ID verification to make a quick buck, but I think poor identity verification is what got SSL into the current mess we're in. You'll note GitHub, Stripe, Mozilla and npm have EV certs. Make of that what you will. Unfortunately letsencrypt doesn't do EV certs. We compared Symantec (whose brands include GeoTrust) when deciding on a CA partner. We picked Digicert based on the issuance speed and business practices. Symantec upsell IE5-level export encryption as a security feature. We don't want to support that. The CA we chose to partner with - Digicert - who we have the same prices as - sits in the middle of the market. They makes the certs for GitHub, Facebook, Intel, Yahoo, and Nintendo.

moe 12y ago
We compared [..] GeoTrust [..] when deciding on a CA partner. [...] Symantec upsell IE5-level export encryption as a security feature. We don't want to support that. Didn't you rather mean to say "The DigiCert referral program pays us much better than GeoTrust"? Or would GeoTrust somehow force you to participate in that IE5 upsell if you were to sell their EV-certs instead of DigiCerts?
- mikemaccana 12y ago
  No, not really. I have code written for the Comodo API from before I spoke to Digicert. I would get a MUCH larger cut for that than I do Digicert. > Or would GeoTrust somehow force you to participate in that IE5 upsell if you were to sell their EV-certs instead of DigiCerts? Yes. The Symantec reseller agreement (remember, GeoTrust is a brand not a company) explicitly forbids you from contradicting their marketing. Also: part of doing good in the world in not supporting people who trick others.

Buge 12y ago

EV certificates will not be free.