Live data from Hacker News

Ask HN: What's the best company to buy SSL certificates from?

news.ycombinator.com

31–40 of 71 posts

Re: Ask HN: What's the best company to buy SSL certificates from?

#31

Ignore anyone in this thread telling you to use StartSSL. When you care about your cert (validated, EV, etc): DigiCert. When you don't care that much: RapidSSL from Namecheap. The end.

> Ignore anyone in this thread telling you to use StartSSL.

Why? What's wrong with it?

Re: Ask HN: What's the best company to buy SSL certificates from?

#32
post #15

StartSSL.com offers free yearly simple SSL certificates, and are supported by all major browsers. If you want higher-grade, you'll have to pay. They're very open about wanting to provide free simple certificates for everyone.

What's the difference between a simple certificate and something higher-grade? What does the simple certificate lack that a higher grade certificate provides?

Re: Ask HN: What's the best company to buy SSL certificates from?

#33
post #20
post #15

StartSSL.com offers free yearly simple SSL certificates, and are supported by all major browsers. If you want higher-grade, you'll have to pay. They're very open about wanting to provide free simple certificates for everyone.

Re: StartSSL see http://www.belshe.com/2012/02/04/rethinking-ssl-for-mobile-a...

Some of those numbers don't look correct at all. For example I can't find any host name that takes longer than ~500ms to do DNS resolution over 3G. (That's almost worst case scenario, where everything except the TLD is uncached.)

Re: Ask HN: What's the best company to buy SSL certificates from?

#34
post #15

StartSSL.com offers free yearly simple SSL certificates, and are supported by all major browsers. If you want higher-grade, you'll have to pay. They're very open about wanting to provide free simple certificates for everyone.

We use StartSSL-free on https://secure.fanboy.co.nz .. no issues with it :)

Re: Ask HN: What's the best company to buy SSL certificates from?

#36

Ignore anyone in this thread telling you to use StartSSL. When you care about your cert (validated, EV, etc): DigiCert. When you don't care that much: RapidSSL from Namecheap. The end.

You might care about your cert. However, your users do not care at all. Most users (not most HN readers!) have no idea what is the difference between certificates.

Do you really think users pause to check what type of SSL certificate the site has? .. And what CA had signed that certificate? They don't -- even when they access their bank.

Re: Ask HN: What's the best company to buy SSL certificates from?

#37
post #9
post #8

Earlier quoted context omitted.

Is there a chance you could elaborate on this some? What would some example "bells and whistles" be with regards to SSL certs?

Verisign EV certs get the green text along with the name of the company in the browser (ex: https://paypal.com ) More information: http://www.verisign.com/ssl/ssl-information-center/extended-...

GoDaddy is listed among the issuers of EV certificates on Wikipedia, so don't they offer them? :

http://en.wikipedia.org/wiki/Extended_Validation_Certificate

(I don't know the difference between standard SSL certificates and EV ones)

Re: Ask HN: What's the best company to buy SSL certificates from?

#38
post #27
post #9

Earlier quoted context omitted.

Verisign EV certs get the green text along with the name of the company in the browser (ex: https://paypal.com ) More information: http://www.verisign.com/ssl/ssl-information-center/extended-...

All EV certificates provide that feature, not just the ones sold by Verisign. Are you a paid shill of Verisign? In general, no one should ever do business with Verisign, due to their practice of domain slamming, their Site Finder misfeature, and other shady practices.

Do they still do that? Thanks for pointing that out though, I found this:

http://www.theregister.co.uk/2002/05/14/verisign_hit_with_sl...

through Wikipedia:

http://en.wikipedia.org/wiki/Domain_name_scams#cite_note-6

"VeriSign was sued in 2002 for their actions in sending ambiguous emails informing people, often incorrectly, that their domain was about to expire and inviting them to click on a link to renew it. Renewing the domain resulted in the registration company being transferred to VeriSign from the previous registrar."

Re: Ask HN: What's the best company to buy SSL certificates from?

#39
post #15

StartSSL.com offers free yearly simple SSL certificates, and are supported by all major browsers. If you want higher-grade, you'll have to pay. They're very open about wanting to provide free simple certificates for everyone.

What's the difference between a simple certificate and something higher-grade? What does the simple certificate lack that a higher grade certificate provides?

Extended verification certificates (EV; "actually verified") cause the browser bar to turn green. That will make people more likely to trust you.
Post reply on HN