Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-18 Thread Greg Broiles
At 09:53 AM 7/11/2002 +0200, Stefan Kelm wrote: See http://www.securityspace.com/s_survey/sdata/200206/certca.html for recent data re SSL certificate market share; Geotrust, at I sincerely doubt the numbers presented in this so-called survey. How did they get to a number of only 91,136

RE: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-15 Thread Lucky Green
Enzo wrote quoting Lucky: The cert shows as being issued by Equifax because Geotrust purchased Equifax's root embedded in major browsers since MSIE 5 on the secondary market. (Geotrust purchased more than just the root). This raises an interesting legal issue. Should any loss from

RE: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-14 Thread Lucky Green
RJ Harvey wrote: Thanks for the tip! I just got a new cert from Geotrust, and it was such an amazing contrast to those I've gotten from Verisign and Thawte! They apparently take the verification info from the whois data on the site, and you really can do the process from start to finish

Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-14 Thread Enzo Michelangeli
- Original Message - From: Lucky Green [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Sunday, July 14, 2002 11:55 AM Subject: RE: IP: SSL Certificate Monopoly Bears Financial Fruit The cert shows that it's issued by Equifax, however. The cert shows as being issued

Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-12 Thread Peter Gutmann
[EMAIL PROTECTED] writes: On 6 Jul 2002 at 9:33, R. A. Hettinga wrote: Thawte has now announced a round of major price increases. New cert prices appear to have almost doubled, and renewals have increased more than 50%. While Thawte proclaims this is their first price increase in five years,

Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-12 Thread Stefan Kelm
Why is not someone else issuing certificates? See http://www.securityspace.com/s_survey/sdata/200206/certca.html for recent data re SSL certificate market share; Geotrust, at I sincerely doubt the numbers presented in this so-called survey. How did they get to a number of only 91,136 secure

RE: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-12 Thread Peter Gutmann
Lucky Green [EMAIL PROTECTED] writes: Trusted roots have long been bought and sold on the secondary market as any other commodity. For surprisingly low amounts, you too can own a trusted root that comes pre-installed in 95% of all web browsers deployed. I'd heard stories of collapsed dot-coms'

RE: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-12 Thread jamesd
-- On 11 Jul 2002 at 1:22, Lucky Green wrote: Trusted roots have long been bought and sold on the secondary market as any other commodity. For surprisingly low amounts, you too can own a trusted root that comes pre-installed in 95% of all web browsers deployed. How much, typically? And

Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-12 Thread RJ Harvey
Thanks for the tip! I just got a new cert from Geotrust, and it was such an amazing contrast to those I've gotten from Verisign and Thawte! They apparently take the verification info from the whois data on the site, and you really can do the process from start to finish in 10 minutes or so.

RE: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-12 Thread Lucky Green
James wrote: On 11 Jul 2002 at 1:22, Lucky Green wrote: Trusted roots have long been bought and sold on the secondary market as any other commodity. For surprisingly low amounts, you too can own a trusted root that comes pre-installed in 95% of all web browsers deployed. How

Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-12 Thread lynn . wheeler
and just to make sure there is a common understanding regarding SSL cert operation ... the browser code 1) checks that the SSL server cert can be validated by ANY public key that is in the browser preloaded list (I haven't verified whether they totally ignore all of the cert part of these

Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-12 Thread Adam Shostack
On Fri, Jul 12, 2002 at 11:18:12AM -0400, Trei, Peter wrote: | I'd rather not state the exact figures. A search of SEC filings may or | may not turn up further details. | | And who actually owns these numerous trusted roots? | | I am not sure I understand the question. | | --Lucky |

Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-10 Thread jamesd
-- On 6 Jul 2002 at 9:33, R. A. Hettinga wrote: Thawte has now announced a round of major price increases. New cert prices appear to have almost doubled, and renewals have increased more than 50%. While Thawte proclaims this is their first price increase in five years, this comes at a

Re: IP: SSL Certificate Monopoly Bears Financial Fruit

2002-07-10 Thread Greg Broiles
At 03:48 PM 7/10/2002 -0700, [EMAIL PROTECTED] wrote: -- On 6 Jul 2002 at 9:33, R. A. Hettinga wrote: Thawte has now announced a round of major price increases. New cert prices appear to have almost doubled, and renewals have increased more than 50%. [...] Why is not someone else