[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] raq3 ssl
At 21:46 13/09/2000, JC Jones wrote:
Does Verisign actually do anything for the money they charge to sign your
SSL certificate? What is wrong with a Self Signed cert.
other than the fact that Verisign wants money?
Just curious, it seems like encryption is encryption regardless of who
"guarantees" the authenticity of the cert.
That's true, but SSL certificates are also used as a means of proving
ownership of a domain/linking a domain to a company.
An independently signed certificate 'certifies' that a company has a right
to that domain and that they are who they say they are... at least in
theory. It doesn't seem like many checks are made on it.
I wouldn't buy a cert from Verisign. I got mine from Equifax
(http://www.equifaxsecure.com) for $45, then used the instructions found in
this lists archives (though slightly modified so i should be able to run
more than one cert if i ever get anymore IPs) to install it.
Regards
--
Rocky Hetherington
r-hetherington@xxxxxxxxxx
Alaula Limited | http://www.alaula.com