Keep in mind that Gandi includes 1 free SSL cert with every domain name. Per year.
Don't submit to the SSL cert racket. You can get one for no charge
11–20 of 88 posts
Re: Don't submit to the SSL cert racket. You can get one for no charge
#12Keep in mind that Gandi includes 1 free SSL cert with every domain name. Per year.
I'm actually shocked at how many places accept the trust chain of my free SSL certificate from Gandi. Some browsers refuse my company's very expensive wildcard certificate from GoDaddy saying it's not trusted but trust mine from Gandi!
Re: Don't submit to the SSL cert racket. You can get one for no charge
#13I've used StartSSL in the past. I will never do so again. Yes, the certs are free, and yes, they work in all common browsers. But the process of obtaining them is a horror of Lovecraftian proportions. I'll happily pay a few dollars to Namecheap to be able to avoid the nightmare that is StartSSL's UI.
I second this experience, and "Lovecraftian" is indeed an excellent way to describe it. It's not just that the process was difficult, it's that my confidence dwindled through every strange and baffling step.
Since you mentioned paying "a few dollars" to Namecheap, can you comment on the feasibility of their $8.95 "PositiveSSL" certificate? ( http://www.namecheap.com/ssl-certificates/comodo.aspx )
Re: Don't submit to the SSL cert racket. You can get one for no charge
#14Its worth to mention that their certificates cannot be used to secure a Java web service because their CA is not included in Java's cert bundle. I had to learn this when I tried to callout to a web service (with a startcom cert) from Salesforce.
Also their certs are only free as long as you don't need to revoke it.
Re: Don't submit to the SSL cert racket. You can get one for no charge
#15Keep in mind that Gandi includes 1 free SSL cert with every domain name. Per year.
I'm with Gandi and didn't actually realise I already had this facility under my nose. Thanks for the information!
Re: Don't submit to the SSL cert racket. You can get one for no charge
#16I've used StartSSL in the past. I will never do so again. Yes, the certs are free, and yes, they work in all common browsers. But the process of obtaining them is a horror of Lovecraftian proportions. I'll happily pay a few dollars to Namecheap to be able to avoid the nightmare that is StartSSL's UI.
Not my experience at all. It's easy and straightforward (really takes less than 10 mins). I have a bunch of startSSL certs in use. Before I started using startSSL certs I used Thawte certs.
Dealing with Thawte was HORRIBLE, these guys are extremely pushy (their sales reps repeatedly called me at home to 'convince' me I really should renew my certificates with them and wouldn't take no for an answer). Contrast that with startSSL where I had some questions and Eddy Nigg personally replied within minutes.
In summary, I highly recommend giving startSSL a shot.
Re: Don't submit to the SSL cert racket. You can get one for no charge
#17Keep in mind that Gandi includes 1 free SSL cert with every domain name. Per year.
I'm actually shocked at how many places accept the trust chain of my free SSL certificate from Gandi. Some browsers refuse my company's very expensive wildcard certificate from GoDaddy saying it's not trusted but trust mine from Gandi!
Their certs are issued by Comodo, which is a well established CA. And they are hardly free, their price is simply rolled into the domain registration fee.
Re: Don't submit to the SSL cert racket. You can get one for no charge
#18I went through the horrendous enrolment process only to find they don't issue certs for subdomains.
Sure they do. I'm using a bunch of them right now. The only restriction startSSL has is that they don't accept popular names like 'amazon' or 'google' for subdomain names (I found out after I tried to get a cert for 'amazon.xxx.com' which we'd run in an AWS EC2 instance for testing). So we switched to 'sandbox.xxx.com' and got the cert within minutes.
Re: Don't submit to the SSL cert racket. You can get one for no charge
#19I'm using it. It is very great to get wildcard certificates, and multi-domain certificates. Yes, their web interface is not great, but it does work.
Re: Don't submit to the SSL cert racket. You can get one for no charge
#20I've used StartSSL in the past. I will never do so again. Yes, the certs are free, and yes, they work in all common browsers. But the process of obtaining them is a horror of Lovecraftian proportions. I'll happily pay a few dollars to Namecheap to be able to avoid the nightmare that is StartSSL's UI.
I find their service excellent. The website doesn't have the latest hip look, but the service is solid, and they are very responsive and helpful in case you run into an issue. For a free service, that's impressive.