RE: [cobalt-users] raq3 ssl

[<rpaiz@xxxxxxxxxxxxxx>]

> Does Verisign actually do anything for the money they charge
> to sign your SSL certificate?  What is wrong with a Self Signed cert.
> other than the fact that Verisign wants money?
>
> Just curious, it seems like encryption is encryption
> regardless of who "guarantees" the authenticity of the cert.

Encryption *is* encryption regardless, and VeriSign *does* want money.
However, the point of a CA is not encryption, it is proof of identity. The
fact that the browser can find them, knows who they are, can (with
confidence) reach them, and then they certify that you are you, is what's
valuable.

I've used Thawte in the past since they were vastly better. Since they
became both VeriSign, I haven't used them. Haven't had a need to.

--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx <mailto:rpaiz@xxxxxxxxxxxxxx>