61–70 of 89 posts
Earlier quoted context omitted.
I am an early adopter, but the blank home page and blank blog are a little too early for my tastes.
We haven't launched yet, and won't be for a while. I'll probably write a post or two about the development soon.
Earlier quoted context omitted.
Correction: two browser vendors who between them have more than half of the browser share. And the solid technical argument is that SHA-1 is no longer considered secure.
They don't have a majority on any site I run, but even if they did, that wouldn't be the point. Decisions about technical matters -- and particularly about security policies -- should be made on the basis of evidence, not appeals to authority. For example, instead of saying "it's a good idea to do this because Google will show scary messages", it would be more helpful to link to a site with a test tool and explanator…
Earlier quoted context omitted.
We haven't launched yet, and won't be for a while. I'll probably write a post or two about the development soon.
Can you at least create a "Coming soon" page with a signup form?
Earlier quoted context omitted.
They don't have a majority on any site I run, but even if they did, that wouldn't be the point. Decisions about technical matters -- and particularly about security policies -- should be made on the basis of evidence, not appeals to authority. For example, instead of saying "it's a good idea to do this because Google will show scary messages", it would be more helpful to link to a site with a test tool and explanator…
I fond appeals to authority OK, given that if 50% of market share wouldn't be on board, nobody would consider adopting it.
To the point of EV certs, if you haven't checked in a while the browser vendors have _really_ started to de-emphasize non EV (standard certs). Here's a visual comparison I put together: https://www.expeditedssl.com/pages/visual-security-browser-s... How you feel about this probably centers around whether you view SSL more as a cryptographic means of securing a connection (stopping traffic snooping) or if you view the…
Earlier quoted context omitted.
Such bad advice given the inquiry. Obviously. Lot of OP's customers are going to want the "best" certs (whatever that means). Or they're going to want "they're name in green". It's important to answer in the context of the question.
"So if you do go for an EV cert, go for the one that has the best listed uptime on it's CRL or OCSP servers. " http://uptime.netcraft.com/perf/reports/performance/OCSP How is the above bad advice, and not answering the context of the question? What other possible qualification is there for "best" EV certs? They are all "green bar". There is little else to them except price differences. His customers are going to want…
Having worked with thousands of business in ecommerce I can guarantee you that a large percentage will want their name to appear "like PayPal and Citibank".
1. DigiCert. They're not the cheapest, but they really have their stuff together. Their support is awesome (speedy, technically competent, and human). They're also proactive about identifying issues with your certs, they handled the heartbleed incident perfectly - reissued for free with no issues. 2. No
Wow, one needs a super premium $595 "Wildcard Plus™" plan to secure an entire domain. Is this normal or a blatant ripoff?