News for hackers. Stuff that matters.

A comment on Ask HN: Does my webapp really need a SSL certificate?. Parent comment

Re:Ask HN: Does my webapp really need a SSL certificate? by gilaniali on Tuesday October 19, 2010 @09:51AM (#1807089)
So then will a self-signed certificate work or do I have to use one from a vendor such as godaddy?
[ Parent | on HN ]
Re:Ask HN: Does my webapp really need a SSL certificate? by ithkuil on Tuesday October 19, 2010 @01:47PM (#1807992)
self-signed certificate will just make your user furious, because recent browsers display very annoying alerts (especially firefox).

self-signed certificate will allow you to encrypt, but it's not secure.

Unfortunately you are bound to get a certificate from "vendors" that ship bundled with the major browsers (if godaddy sells you a certificate then it's ok).

Anyway, just a link for an utopic world http://www.cacert.org/. I don't know if something like cacert would work in the real world, but certificates are about trust, not about money.

[ Parent | on HN ]