News for hackers. Stuff that matters.
Re:SSL And The Future Of Authenticity by wereHamster on Sunday April 21, 2013 @05:01AM (#5584357)
You pay that fee, and then can generate unlimited wildcard certificates for a year.
Re:SSL And The Future Of Authenticity by kaoD on Sunday April 21, 2013 @05:09AM (#5584375)
Which is > $8... and specially > free.

You can get a free Lamborghini for an inexpensive $400,000 one-time fee!

Re:SSL And The Future Of Authenticity by wereHamster on Sunday April 21, 2013 @05:41AM (#5584412)
If you have >7 domains and want wildcard certificates, it is the cheapest option.

Edit: also, if I can get an unlimited number of Lamborghinis for just 400k, where do I sign up??

Re:SSL And The Future Of Authenticity by kaoD on Sunday April 21, 2013 @08:22AM (#5584633)
> If you have >7 domains and want wildcard certificates, it is the cheapest option.

Thanks for the info but I just tried to refute the fact that free/$8 certificates do the same as $800, which they clearly don't.

Don't get me wrong: it's great! But completely irrelevant for the argument.

> if I can get an unlimited number of Lamborghinis for just 400k, where do I sign up??

You only get a single certificate for $60, not an unlimited number of them.

EDIT: see child comment, I'm wrong and you do get unlimited certificates.

Re:SSL And The Future Of Authenticity by wereHamster on Sunday April 21, 2013 @08:54AM (#5584694)
You are wrong. At StartSSL, you can get an unlimited number once they validated your person, which costs 60$. That validation lasts for a year. During that year you can generate as many wildcard certificates as you want.

See https://www.startssl.com/?app=25#27

"The fees for Class 2 (60$) and higher are applied to the verification and not for the certificate(s), i.e. you pay for the validations we perform. Once validated there is no limit placed on the amount of certificates one can receive (This depends on other limitations such as uniqueness of the subject line for example)."

Edit: They cover exactly their costs. The cost is at validating your persona (they call you, you fax them scans of your passport/drivers license/etc, they need to check that etc.). Issuing a certificate is fully automatic so there are no costs associated with that, so they don't charge for that.

Re:SSL And The Future Of Authenticity by Dylan16807 on Sunday April 21, 2013 @12:58PM (#5585423)
But why do wildcard certificates need more validation in the first place?
Re:SSL And The Future Of Authenticity by kaoD on Sunday April 21, 2013 @08:59AM (#5584705)
Thanks! That's good to know! (But irrelevant to the discussion anyways.) Edited the info in the parent comment for further readers.