3 ms·

> And yes, the race-to-the-bottom has hit $5, see ssls.com What's the race to the bottom for wildcard certs though? Looks like $80+/year, which is frankly comp

> And yes, the race-to-the-bottom has hit $5, see ssls.com What's the race to the bottom for wildcard certs though? Looks like $80+/year, which is frankly completely ridiculous seeing as it's exactly the same amount of work for the CA. The whole thing's a racket, we would honestly be better off using self-signed certs and certificate pinning (perhaps with a global list of cert pins stored in the browser/a server the browser implicitly trusts) I mean, we have to trust the browser anyway, might as well make it handle all the security

methou 12y ago
Startssl has wildcard certs if you buy their service at 50$/yr, plus many other stuff.
- jnky 12y ago
  The $59.90 account only buys you identity verification so that you can get a cert for your own personal domains. When you want to get certs for a company's domains, you also have to pay for organisation verification for another $59.50. In neither case are you allowed to request certificates for domains owned by other entities, even if you are authorized to do so by the owner (e.g. as a service provider). See here: https://www.startssl.com/policy.pdf https://www.startssl.com/policy.pdf