HTTPS is more secure, so why isn't the Web using it?

Re:HTTPS is more secure, so why isn't the Web using it? by JonnieCache on Monday March 21, 2011 @07:43AM (#2349262)

>Why can't the domain name registrar give me a SSL cert for free?

http://www.startssl.com/ will give you a free class one SSL cert that works in all major browsers. They will also sell you a class 2 cert with wildcard support for $49 a year. These can cost $800+ in other places IIRC.

They are trying valiantly to destroy the entrenched price structure of the SSL cert market and I wish them the best of luck.

[ Parent | on HN ]

Re:HTTPS is more secure, so why isn't the Web using it? by mooism2 on Tuesday March 22, 2011 @06:23AM (#2353745)

Their website says their certs work in all major browsers, but I can't find anywhere where it says which versions of those major browsers it works with.

E.g. it works with Internet Explorer. Does that include IE6? They don't say.

[ Parent | on HN ]

Re:HTTPS is more secure, so why isn't the Web using it? by JonnieCache on Tuesday March 22, 2011 @10:08AM (#2354375)

They're free, why not try it and find out? ;)

But yes, as far as I remember, they do work on IE6. The root certs dont really change between browser versions I think, its more a matter of the the different vendors.

[ Parent | on HN ]

Re:HTTPS is more secure, so why isn't the Web using it? by yuhong on Tuesday March 22, 2011 @03:30PM (#2356029)

To be more precise, IE uses the SSL libs built-in to Windows since 2000. As a result the list of trusted root CAs is built-in too. MS added StartCom to the list in 2009.

[ Parent | on HN ]