Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Stop supporting the SSL cartel.

Just use StartSSL.

Free or $60 for two years if you need subdomain wildcards.

http://www.startssl.com/?app=40



NB: On p. 12, section 3.1.2.1, the policy [1] states:

Class 1 certificates are limited to client and server certificates, whereas the later is restricted in its usage for non-commercial purpose only. Subscribers MUST upgrade to Class 2 or higher level for any domain and site of commercial nature, when using high-profile brands and names or if involved in obtaining or relaying sensitive information such as health records, financial details, personal information etc.

[1] http://www.startssl.com/policy.pdf


And $24.90 if you need a certificate revoked. Very helpful. Not.

Also, isn't there any CA that gives away wildcard certs for free? It's the only reason I'm sticking with CACert...


Their $140 EV certs do not have revocation fees.

http://www.startssl.com/?app=37

Revocations carry a handling fee, except for Extended Validation SSL Certificates


StartSSL oddload additional work for your lawyer or accountant so they can skip some EV steps. In turn, you get to pay for their billable hours:

http://www.startssl.com/extended-validation-application-requ...


Mike from CertSimple here (using old openid account as my other one is replying too fast):

StartSSL don't do EV (edit: they do, just not for $60).

We only do EV, since we actually identifying companies is how SSL should have always been.

$60 is way too much to pay for non-EV, an automated process that doesn't check who you are. If you want a non-EV certificate, wait a couple of months and use https://letsencrypt.org


StartSSL don't do EV

They say they do. See the page http://www.startssl.com/?app=40


You're right. Edited.


Don't use StartSSL, they are shady and often a hassle to deal with. If you don't need EV certs, hope that "let's encrypt" comes of the ground quickly.


That has not been my experience. What issues did you have?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: