News for hackers. Stuff that matters.

A comment on SSL And The Future Of Authenticity. Parent comment

Re:SSL And The Future Of Authenticity by pzb on Sunday April 21, 2013 @02:33AM (#5584086)
In what way is a StartSSL certificate any different from a Comodo certificate? What makes StartSSL only usable for "playing"?
[ Parent | on HN ]
Re:SSL And The Future Of Authenticity by kijin on Sunday April 21, 2013 @03:07AM (#5584153)
StartSSL is recognized by OS X 10.5 or later, and Windows 7 or later. Older OSes might not recognize it if the user has missed any updates.

I'm OK with showing IE6/7 users a polite suggestion to upgrade, but a certificate error looks unprofessional. In addition, Chrome on XP is also affected (if the user has missed the CA update) because Chrome doesn't carry its own list of trusted CAs.

[ Parent | on HN ]
Re:SSL And The Future Of Authenticity by caf on Sunday April 21, 2013 @04:32AM (#5584311)
If someone's browsing the internet with unpatched XP then they've got bigger problems than some certificate warnings appearing.
[ Parent | on HN ]
Re:SSL And The Future Of Authenticity by kijin on Monday April 22, 2013 @08:59AM (#5589049)
That's their problem, not yours. Remember, we're talking about Chrome here, not IE6/7.
[ Parent | on HN ]
Re:SSL And The Future Of Authenticity by chmike on Sunday April 21, 2013 @03:02AM (#5584143)
Free StartSSL are for non commercial usage. This is, I guess, what he means by "for playing", I don't know for comodo, if their certificates can be use for commercial applications.
[ Parent | on HN ]