Linked by Thom Holwerda on Fri 29th Aug 2008 13:23 UTC, submitted by irbis
Thread beginning with comment 328512
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[2]: Cert Authority System's Fault
by braddock on Fri 29th Aug 2008 15:04
in reply to "RE: Cert Authority System's Fault"
Wow, the price is right ($0) at www.startssl.com - thanks, I'll probably register.
CAcert sounds like the right community-based idea, but they are actually recommending people use a few words of l33t sp34k for their pass phrases!? I don't think I would be shipping their cert quite yet either...
RE[2]: Cert Authority System's Fault
by CrLf on Fri 29th Aug 2008 15:25
in reply to "RE: Cert Authority System's Fault"
That doesn't solve the problem for internal domains (the only solution is to create an internal CA and add its root certificate to the browser), not does it solve the problem for embedded web administration in a variety of devices (many of which don't even allow the certificate to be changed).




Member since:
2008-03-08
Luckily for you, you CAN afford a certificate from a verified CA. startcom offers free SSL certificates via http://www.startssl.com/ and it is recognised by Firefox.
Unfortunately, not many people know about this.
(Hopefully, CAcert will be recognised soon too, but that may not be soon enough for most people.)
EDIT: Unfortunately, startcom is not recognised as a valid SSL authority by other browser vendors (Microsoft IE, maybe Opera and Apple too), so it may not be a good fit.
Edited 2008-08-29 14:55 UTC