RE: SSL Certificate Pricing

[David Dorey]

Title: Message

While we are on Verisign Certs, (hope this hasnt been posted to the list already)

 

The Register today :  http://www.theregister.co.uk/content/4/26620.html

 

A colossal stuff-up in Microsoft's and KDE's implementation of SSL (Secure Sockets Layer) certificate handling makes it possible for anyone with a valid VeriSign SSL site certificate to forge any other VeriSign SSL site certificate, and abuse hapless Konqueror and Internet Explorer users with impunity.

 

All good clean fun...

 

Kind regards,

 

David Dorey

www.Xsession.Com

 

PS.  OT but I cant help myself.  I am gladly accepting sponsorship to sleep rough in London for Byte Night 2002 if anyone would like to help - http://dave.xsession.com  -  Byte Night, the annual sleep out for the UK IT industry in support of NCH's work with homeless young people and those at risk of homelessness.

 

 

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ross Wm. Rader
Sent: 12 August 2002 18:03
To: [EMAIL PROTECTED]; 'Chris M'; 'Kim Phelan'; [EMAIL PROTECTED]
Subject: RE: SSL Certificate Pricing

Further to that, for Windows, Tucows lists 46 applications in the browsers (realizing that one or two really aren't browsers...) - the 90% means that only 5'ish aren't supported that tracks back to about 7 users out of the bazillion that use Netscape and IE...;)

 

..ummm...yawn.

 

http://tucows.idirect.com/web95.html

                       -rwr




"There's a fine line between fishing and standing on the shore like an idiot."
- Steven Wright

Please review our ICANN Reform Proposal:
http://www.byte.org/heathrow
 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Ross Wm. Rader
Sent: Monday, August 12, 2002 12:17 PM
To: 'Chris M'; 'Kim Phelan'; [EMAIL PROTECTED]
Subject: RE: SSL Certificate Pricing

I usually leave debunkiung to the experts, but this one is so rich that I can't contain myself...I'll let Kim explain the rest...;)

 

90% browser compatibility doesn't equal 90% of browser users.

 

90% browser compatibility equals closer to 99% of browser users...

 

Verisign, true to form, has spun some numbers that make it appear that their mathemetically generated keys are somehow more useful than our mathematically generated keys. Practically speaking, the differences just aren't important.

 

 

 

                       -rwr




"There's a fine line between fishing and standing on the shore like an idiot."
- Steven Wright

Please review our ICANN Reform Proposal:
http://www.byte.org/heathrow
 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Chris M
Sent: Monday, August 12, 2002 12:07 PM
To: Kim Phelan; [EMAIL PROTECTED]
Subject: RE: SSL Certificate Pricing

I received some interesting commentary from Thawte when I asked them about Geotrust cert quality, can anyone comment on these purported shorcomings of Geotrust certs, specifically, how this impacts the $99 Geotrust certs?

---
Thawte (Verisign) does not have a competitor on the market that offers the same
products and authentication levels at the same low prices!
You should move to Geotrust with pleasure as long as you and your customers
understand that you are not getting the same level of product. Geotrust does not
currently comply with the standards set by the Web Trust Authority for all their
products.
If you had to purchase the same level of product from Geotrust it will actually
cost you *more*. In addition to this, you would need to pay extra for a trusted
site seal!
Another limitation you may want to communicate to your customers is that all of our
competitors only have *90%* browser compatibility (as opposed to Thawte who have
99%) because they are so new in the market. Are your customers prepared to lose 10%
of their potential revenue to save $50?
---

At 11:38 AM 8/12/2002 -0400, you wrote:

True Business ID SSL Certs are $99/cert, can be found in the Certs contract.
 

Kim Phelan
Product Manager
Tucows, Inc.

-----Original Message-----

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ian Rothwell

Sent: Monday, August 12, 2002 11:30 AM

To: [EMAIL PROTECTED]

Subject: SSL Certificate Pricing

We would like to start offering SSL certificates to our customers but I can't seem to find out how much the Tucows certificates are.

Could someone point me in the right direction?

Thanks,

Ian