Re:Comodo will just issue you an SSL cert for anyone
by tptacek on Tuesday December 30, 2008 @03:59PM
(#414668)
Thawte is apparently one of the fuckups in the Sotirov et al report from this morning. Paul Kocher, one of the designers of SSL3/TLS, told the NYTimes that he was astonished that anyone would rely on MD5 in 2008; is it possible that nobody at Thawte really understands how SSL and x509 works? If so, is it really an industry success story that they got included with IE?
[ Parent
| on HN ]
Re:Comodo will just issue you an SSL cert for anyone
by jhancock on Tuesday December 30, 2008 @04:19PM
(#414692)
Thawte is unfortunately not the same company anymore. It doesn't surprise me a bit that Verisign let it degrade.
Thawte _was_ a success story for its time. When Shuttleworth created it he severely undercut prices which is why Verisign had to buy them since he was quickly working up the food chain. After Verisign bought them, they carefully controlled the product offering to keep it the low-price step-child that it is today.
I have used Thawte a few times but the last few years I have been dissatisfied. Do you have any recommendations? I would like to give my business to someone other than Verisign if possible.