News for hackers. Stuff that matters.

A comment on Don't submit to the SSL cert racket. You can get one for no charge. Parent comment

Re:Don't submit to the SSL cert racket. You can get one for ... by cinch on Sunday January 15, 2012 @10:51AM (#3467366)
you'd want to revoke it if someone steals your private key.
[ Parent | on HN ]
Re:Don't submit to the SSL cert racket. You can get one for ... by Karunamon on Sunday January 15, 2012 @12:32PM (#3467650)
Given the way Startcom operates, that could become expensive quickly. Since your private key is your gateway into your account (Why they went with this method instead of requiring a sensible password is beyond me, it's one of the reasons their site is a huge pain...), theoretically every certificate you own is compromised, and therefore you'd be out $25 for each one.

..ouch!

[ Parent | on HN ]