News for hackers. Stuff that matters.

A comment on Show HN: Fast and simple way to get EV SSL certificates.

Re:Show HN: Fast and simple way to get EV SSL certificates by ck2 on Monday March 16, 2015 @09:01AM (#9211133)
Stop supporting the SSL cartel.

Just use StartSSL.

Free or $60 for two years if you need subdomain wildcards.

http://www.startssl.com/?app=40

[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by currysausage on Monday March 16, 2015 @09:11AM (#9211178)
NB: On p. 12, section 3.1.2.1, the policy [1] states:

Class 1 certificates are limited to client and server certificates, whereas the later is restricted in its usage for non-commercial purpose only. Subscribers MUST upgrade to Class 2 or higher level for any domain and site of commercial nature, when using high-profile brands and names or if involved in obtaining or relaying sensitive information such as health records, financial details, personal information etc.

[1] http://www.startssl.com/policy.pdf

[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by Ao7bei3s on Monday March 16, 2015 @09:41AM (#9211332)
And $24.90 if you need a certificate revoked. Very helpful. Not.

Also, isn't there any CA that gives away wildcard certs for free? It's the only reason I'm sticking with CACert...

[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by ck2 on Monday March 16, 2015 @03:39PM (#9213820)
Their $140 EV certs do not have revocation fees.

http://www.startssl.com/?app=37

Revocations carry a handling fee, except for Extended Validation SSL Certificates

[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by nailer on Wednesday March 25, 2015 @09:43AM (#9262838)
StartSSL oddload additional work for your lawyer or accountant so they can skip some EV steps. In turn, you get to pay for their billable hours:

http://www.startssl.com/extended-validation-application-requ...

[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by mikemaccana on Monday March 16, 2015 @11:32AM (#9211965)
Mike from CertSimple here (using old openid account as my other one is replying too fast):

StartSSL don't do EV (edit: they do, just not for $60).

We only do EV, since we actually identifying companies is how SSL should have always been.

$60 is way too much to pay for non-EV, an automated process that doesn't check who you are. If you want a non-EV certificate, wait a couple of months and use https://letsencrypt.org

[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by mhb on Monday March 16, 2015 @12:08PM (#9212255)
StartSSL don't do EV

They say they do. See the page http://www.startssl.com/?app=40

[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by mikemaccana on Monday March 16, 2015 @12:19PM (#9212325)
You're right. Edited.
[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by detaro on Monday March 16, 2015 @09:50AM (#9211383)
Don't use StartSSL, they are shady and often a hassle to deal with. If you don't need EV certs, hope that "let's encrypt" comes of the ground quickly.
[ Parent | on HN ]
Re:Show HN: Fast and simple way to get EV SSL certificates by mhb on Monday March 16, 2015 @11:32AM (#9211962)
That has not been my experience. What issues did you have?
[ Parent | on HN ]