Re: CRIME SSL Certificates

From: Wil Cooley (wcooley@private)
Date: Wed Nov 05 2003 - 13:18:05 PST

  • Next message: Alan: "RE: CRIME Anyone else notice www.fbi.gov is down?"

    On Wed, 2003-11-05 at 10:51, Todd Ellner wrote:
    > Sorry to ask this question again, but I've been having trouble with the
    > archives, and my Windows machine (which had my old mail) just died in an
    > interesting fashion.
    > 
    > Quickly, the company I work for wants to buy some SSL certificates for a
    > couple web servers and an application server. We looked at Verisign on
    > the "nobody ever got fired for buying IBM" and because of the nice,
    > seamless way it embeds itself into the client's browser. Their price per
    > certificate was high, but not too bad. Then we saw the price per license
    > that you have to buy for each additional server that is using that
    > single certificate. The money people said "You have to be kidding."
    > 
    > So, what are some good alternatives? We are currently looking at Thawte,
    > Baltimore, DST and Equifax.
    > 
    > Any suggestions? Any preferences?
    
    Web browsers come already populated with many more cert from "root" CAs
    than Verisign; don't feel compelled to buy from them for that reason.
    I've bought SSL certs from InstantSSL/Comodo for the last couple of
    years--they're only $50/yr.  The only hitch is that you have to install
    their intermediary CA cert, but it's a one-liner in Apache.
    
    Wil
    -- 
    Wil Cooley                                 wcooley@private
    Naked Ape Consulting                        http://nakedape.cc
    * * * * Linux, UNIX, Networking and Security Solutions * * * *
    *     Tired of spam and viruses in your e-mail?  Get the     *
    * Naked Ape Mail Defender! http://nakedape.cc/r/maildefender *
    
    
    



    This archive was generated by hypermail 2b30 : Wed Nov 05 2003 - 14:43:11 PST