Comments on: Certificate opinions

By: https, here – DragonFly BSD Digest

https, here – DragonFly BSD Digest — Sat, 27 Sep 2014 02:25:28 +0000

[…] had a reminder in my calendar to do it tonight, and thanks to your suggestions, I have a ‘real’ SSL certificate installed. If you want to browse the Digest using […]

By: Anonymous Coward

Anonymous Coward — Fri, 19 Sep 2014 10:57:24 +0000

https://sslmate.com/ resells RapidSSL with the least amount of hassle that I know of.

It’s a service by https://www.agwa.name/

I’m not happy about node.js dependency but otherwise looks fine.

By: Anon

Anon — Wed, 17 Sep 2014 18:45:52 +0000

I’d go for self-signed unless you have enough money to waste for the highwayman CAs.

Another option *was* CA Cert, but rumors are their free root key is hashed with MD5, which blows in beta firefox (and soon release) versions.

By: FinFin

FinFin — Wed, 17 Sep 2014 12:51:43 +0000

P.S. you still wanna see that server?

By: FinFin

FinFin — Wed, 17 Sep 2014 12:51:22 +0000

SwissSign if you need to send emails to buisness customers.
Otherwise, for a project like this just self-certify and post the certificate publicly. CAs are a terribly flawed invention anyways.

By: Carsten

Carsten — Tue, 16 Sep 2014 21:42:52 +0000

I heard good things about “Digicert”, but don’t have any personal experience with them.

By: odc

odc — Tue, 16 Sep 2014 20:32:31 +0000

Justin Sherrill – You are right. But that was 3 years ago, and it wasn’t even Comodo’s fault (it was a reseller). A few certificates were blacklisted back then. Hopefully they have learned from their mistake. I have never heard of people blocking all Comodo certificates. That would be stupid.

By: Dean

Dean — Tue, 16 Sep 2014 09:28:00 +0000

StartSSL certificates are what they are – free! So unless you are doing financial transactions they are probably fine. You can pay money and get “stronger” certificates from them. Also you have to pay to cancel your certificate.

InstantSSL are a cheap reseller of all the usual authorities.

By: Justin Sherrill

Justin Sherrill — Tue, 16 Sep 2014 02:04:35 +0000

odc – isn’t Comodo the one that had significant fraud issues? Do people still accept their certificates?

By: Alan

Alan — Mon, 15 Sep 2014 20:18:59 +0000

Been using godaddy for years for hundreds of websites. No issues.

By: jcs

jcs — Mon, 15 Sep 2014 19:15:53 +0000

I have a few certs through ssls.com who resell other big providers’ certs so there is good client compatibility with them. $5/year, easy to register and renew.

By: odc

odc — Mon, 15 Sep 2014 19:13:05 +0000

The least expensive “serious” certificate provider I found is namecheap.com. They provide Comodo certificates. No complains, except the lack of documentation for newbies.

By: M?rcis

M?rcis — Mon, 15 Sep 2014 18:01:01 +0000

Last time I needed to have certificate, signed by “popular” (i.e. likely to be shiped with most browsers/OSes) I used free certificate from StartSSL, but then again, this was not serious. Their Free certificate only guarantees, that they have remotely validated Your control over FQDN You want to sign.

By: jungle

jungle — Mon, 15 Sep 2014 17:31:52 +0000

Hello Justin,

I recommend namecheap.com

I was like you–clueless about a good TLS provider but I took the recommendation based on this great article:
https://calomel.org/nginx.html

It was very easy to revoke the certs to reissue as ECDSA and reistall. Namecheap suppot two factor auth, too.

My certs were only $10 annually.

Where ever you go, be sure to get SHA256 certs and check out:
https://www.feistyduck.com/books/bulletproof-ssl-and-tls/
https://twitter.com/ivanristic

Best of luck,
Jungle