21–30 of 40 posts
Earlier quoted context omitted.
That allows CloudFlare to MITM your SSL, so I'm torn on whether it's better than plaintext. Sure, it reduces the points where people can read your data down to one, but it also makes SSL go from "definitely secure to the server" to "probably secure".
Do you feel the same way about SSL termination on an Amazon ELB?
According to their site, http://blog.eurodns.com/eurodns-ssl-certificates/ , this is only for domains registered with them. So it's not really free. StartCom/StarSSL has provided fully free certificates for some time: http://www.startssl.com/?app=1 edit : Title is now clearer, I believe the "to customers" portion wasn't initially there. Or I just suck at reading.
Registered or transferred domains.
If they had announced this before the Let's Encrypt[0] initiative it would have been more impressive, but still it is a nice gesture to offer these for the month or two that people are still buying them. I wonder if it is a preemptive move to keep customers from taking their certificates elsewhere, as you will be able to do with the Let's Encrypt certs? Reading the rest of the announcement, It looks like they are slo…
Insofar as I can guess the end-game, it seems like they want to offer free certs so that providers like EuroDNS do exactly this. That way we have lots of providers offering free certs and competing on features and security rather than cost.
Their annual domain registration prices appear to be 50-100% higher than many other registrars, so I'm not sure how "free" this is...
True, it's not the cheapest but EuroDNS is more service oriented with a free mailbox, a free ssl certificate, 4 name servers with Anycast nodes. And the renewals remain usually at the same price, and not the first year under the real cost price as some does in the industry.
Also I found your web management interface to be difficult to navigate. I often had to go looking in your KB to find answers for how to do simple things like update A records (Namecheap does this much better).
The one positive thing I will say from my time as a EuroDNS customer is that you do allow people to register European domains that require residence, acting as the Technical contact for customers who are not living in Europe.
But overall, the higher prices and below average service weren't a compelling reason to stick with you guys. Other registrars like Namecheap also offer free SSL certificates for new registrations and multiple DNS servers.
According to https://www.eurodns.com/ssl-certificate-faq/#whatisincluded "For an additional fee you can add a wildcard to the Alpha SSL certificate meaning that the certificate can be used on an unlimited number of subdomains and servers. The wildcard option allows for additional subdomains or servers to be added in the future." ... so no wildcards for free. fyi.
While a step in the right direction for EuroDNS, it's not really exciting at all. We need more completely free CAs.
While a step in the right direction for EuroDNS, it's not really exciting at all. We need more completely free CAs.
No, we don't. The CA is supposed to verify the owner of the certificate and stand behind that with a financial guarantee. Otherwise, it's just security theater.
While a step in the right direction for EuroDNS, it's not really exciting at all. We need more completely free CAs.
No, we don't. The CA is supposed to verify the owner of the certificate and stand behind that with a financial guarantee. Otherwise, it's just security theater.
According to their site, http://blog.eurodns.com/eurodns-ssl-certificates/ , this is only for domains registered with them. So it's not really free. StartCom/StarSSL has provided fully free certificates for some time: http://www.startssl.com/?app=1 edit : Title is now clearer, I believe the "to customers" portion wasn't initially there. Or I just suck at reading.
They charge for revocation, so it negates the entire idea of a "free certificate" if you can't properly revoke them without forking over money. It literally breaks the entire idea of revocation.
This was made very clear when Heartbleed happened
While a step in the right direction for EuroDNS, it's not really exciting at all. We need more completely free CAs.
No, we don't. The CA is supposed to verify the owner of the certificate and stand behind that with a financial guarantee. Otherwise, it's just security theater.