Last meeting we spoke about SSL for a brief few minutes as a result of the self signed one we saw. Just thought I'd share with the group where that $25 / 5 year is.
https://www.ssls.com/comodo-ssl-certificates/positivessl.html
Regards,
On 2014-06-12 Paul Sierks wrote:
Last meeting we spoke about SSL for a brief few minutes as a result of the self signed one we saw. Just thought I'd share with the group where that $25 / 5 year is.
https://www.ssls.com/comodo-ssl-certificates/positivessl.html
That's dirt cheap. Have you bought one? Can you vouch that they are root CA'd in every major browser / platform? That's always the big problem when I see non-big-guy CA's. If only half (or less!) of the browsers have their root CA then might as well just self-sign.
I'm a reseller for Tucows/OpenSRS for certs and am always shocked how expensive the big-name certs cost... COST! Not even talking about what I'd have to charge to make even a small profit. Surely either a) the big guys give you something the unknowns do not, or b) big-guy's cert prices must inevitably fall to remain competitive, or c) the big-guys don't care or think most people will never find cheaper certs.
The higher end certificates come with more insurance. Usually the terms of the insurance are such that cashing it in is impossible, but that's another issue.
It's marketing. The higher priced places are not selling to you, they're selling to people that want to buy the perception of security through a) a higher cost and b) selling a name.
I've worked at multiple companies where buy the top tier certs because the higher ups want the site seal from a recognized place. One employer has a portal where the tech staff orders SSL certs, they don't get to see the prices and the only two options are wildcard and EV. Yes, EV certs for staging environments, too. And that portal only works on Internet Explorer :(
That said, since many articles have been written showing the results of an A/B test almost universally point to site seals and lock icons increasing sales, it's not a stretch to think that name recognition of the seals may also have an effect. So paying $1,000 for an SSL certificate that actually increases sales may be worth it in some cases.
Sean
On Fri, Jun 13, 2014 at 12:24 AM, Trevor Cordes trevor@tecnopolis.ca wrote:
On 2014-06-12 Paul Sierks wrote:
Last meeting we spoke about SSL for a brief few minutes as a result of the self signed one we saw. Just thought I'd share with the group where that $25 / 5 year is.
https://www.ssls.com/comodo-ssl-certificates/positivessl.html
That's dirt cheap. Have you bought one? Can you vouch that they are root CA'd in every major browser / platform? That's always the big problem when I see non-big-guy CA's. If only half (or less!) of the browsers have their root CA then might as well just self-sign.
I'm a reseller for Tucows/OpenSRS for certs and am always shocked how expensive the big-name certs cost... COST! Not even talking about what I'd have to charge to make even a small profit. Surely either a) the big guys give you something the unknowns do not, or b) big-guy's cert prices must inevitably fall to remain competitive, or c) the big-guys don't care or think most people will never find cheaper certs. _______________________________________________ Roundtable mailing list Roundtable@muug.mb.ca http://www.muug.mb.ca/mailman/listinfo/roundtable
Yep, I'm currently using them on few domains for https, imap & smtp starttls. No issues on any devices (mobile included).
On 06/13/2014 12:24 AM, Trevor Cordes wrote:
On 2014-06-12 Paul Sierks wrote:
Last meeting we spoke about SSL for a brief few minutes as a result of the self signed one we saw. Just thought I'd share with the group where that $25 / 5 year is.
https://www.ssls.com/comodo-ssl-certificates/positivessl.html
That's dirt cheap. Have you bought one? Can you vouch that they are root CA'd in every major browser / platform? That's always the big problem when I see non-big-guy CA's. If only half (or less!) of the browsers have their root CA then might as well just self-sign.
I'm a reseller for Tucows/OpenSRS for certs and am always shocked how expensive the big-name certs cost... COST! Not even talking about what I'd have to charge to make even a small profit. Surely either a) the big guys give you something the unknowns do not, or b) big-guy's cert prices must inevitably fall to remain competitive, or c) the big-guys don't care or think most people will never find cheaper certs. _______________________________________________ Roundtable mailing list Roundtable@muug.mb.ca http://www.muug.mb.ca/mailman/listinfo/roundtable
-
Paul Sierks -
Sean Walberg -
Trevor Cordes