Defending Our Brand • Hacker News Board

Re: Defending Our Brand

#131

Post by knet » Thu, Jun 23, 2016, 4:35 PM UTC

nikcub wrote: post #119

CommanderData wrote: post #11

Learning this, I will not renew my certs with Comodo. This is childish behaviour on Comodos part. If it helps I'll advise any companies I consult to do the same until this changes. Money is the only thing this company will understand.

I've avoided the big issuers for a while now. Big plug for Digicert who are excellent - they're independent (so not conflicted), have great infrastructure (fastest on OSCP), super support and active in pushing standards such as CT, short-lived certs, and adopting .onion support after internal names were deprecated. I use LetsEncrypt in most cases (and have companies I work with donate a portion of what they used to s…

+1 for Digicert, awesome service. I'm definitely looking at letsencrypt for our next project.

Re: Defending Our Brand

#132

Post by yvesmh » Thu, Jun 23, 2016, 4:36 PM UTC

privong wrote: post #123

impostervt wrote: post #112

This post made me hover over the green lock icon for this page: "Verified by: COMODO CA Limited"

When I hover over the green lock it says: "Verified by: IdenTrust".

He probably meant Hacker News, just checked and HN is verified by Comodo and LetsEncrypt by IdenTrust.

Re: Defending Our Brand

#133

Post by davidgerard » Thu, Jun 23, 2016, 4:37 PM UTC

jonlucc wrote: post #43

CommanderData wrote: post #11

Learning this, I will not renew my certs with Comodo. This is childish behaviour on Comodos part. If it helps I'll advise any companies I consult to do the same until this changes. Money is the only thing this company will understand.

Just curious, but do you think companies you consult care enough to switch? It's usually easier to just renew, and I wonder if consultants have the leverage to get customers to care.

We buy EV certs for those sites where the business unit and/or marketing demands it, but otherwise we just use Let's Encrypt. (Small publisher with some paid info sites.)

Re: Defending Our Brand

#134

Post by dizzy3gg » Thu, Jun 23, 2016, 4:37 PM UTC

karim wrote: post #122

sikosmurf wrote: post #104

Earlier quoted context omitted.

Please refrain from starting and continuing "comment chains". It's not funny and doesn't add to the conversation.

I disagree. I think it's important to show that multiple people decided to donate because of this single comment. It's prompted me to donate to Let's Encrypt.

I also donated I think the feeling of missing out helped sway the decision.

Re: Defending Our Brand

#135

Post by NelsonMinar » Thu, Jun 23, 2016, 4:41 PM UTC

Comodo is not a trustworthy security company.

Their browser extensions break browser security: https://news.ycombinator.com/item?id=11021633 https://news.ycombinator.com/item?id=9091917

They issued fraudulent SSL certificates in 2011: https://www.schneier.com/blog/archives/2011/03/comodo_group_...

Re: Defending Our Brand

#136

Post by tomstockmail » Thu, Jun 23, 2016, 4:42 PM UTC

sikosmurf wrote: post #104

pr0ph3t wrote: post #51

Your motivation motivated me to donate

Please refrain from starting and continuing "comment chains". It's not funny and doesn't add to the conversation.

Please refrain from telling people what is not funny. It's not polite and doesn't add to the conversation.

Re: Defending Our Brand

#137

Post by drumttocs8 » Thu, Jun 23, 2016, 4:45 PM UTC

I'm not sure what happened with Comodo in the past couple of years. I used to love their firewall and "secure" browser products- but then they stripped features from their free firewall option, and added sponsored links to the address bar autocomplete results! Literally a complete 180 from impressions of privacy and security I originally had of the company.

Re: Defending Our Brand

#138

Post by dspillett » Thu, Jun 23, 2016, 4:48 PM UTC

schlowmo wrote: post #45

pcora wrote: post #28

Earlier quoted context omitted.

While the naming might be similar, they are actually providing a free ssl cert, right? similar to LE. If that is the case, then its a good thing (IMHO)

They always provided free "personal" certifcates with a validity of one year. But they market the "Start Encrypt" thing like you now get wildcard and EV certificates for free (which isn't true). Talking about scummy practices...

Fairly standard scummy marketing though. Once you have the appropriate auth level to generate certificates of the type you desire (a one-off process, or at leas once-per-two-years) every certificate you have signed is free.

Re: Defending Our Brand

#139

Post by jrockway » Thu, Jun 23, 2016, 4:49 PM UTC

As part of my branding consulting services, I could totally come up with some non-trademarked-but-like-totally-better names. For instance:

1) We gonna encrypt u

2) Allow us to encrypt!

3) I CAN HAZ NCRYPTON?

Re: Defending Our Brand

#140

Post by kevindeasis » Thu, Jun 23, 2016, 4:51 PM UTC

Who do you guys trust for your wildcards needs? Assuming you were to build a super cheap side project on the weekends and you needed subject alternative names for your first-level subdomains.