Re: [gentoo-user] OT - SSL certificate authorities

2005-11-21 Thread A. Khattri
On Sat, 19 Nov 2005, kashani wrote: A. Khattri wrote: GeoTrust claim to have their root cert in 99% of the browsers out there... Claims and actually works are two different things. For the record IE 5 on the Mac is your big problem child. IE 5 on Mac is a strange beast in many many

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-19 Thread A. Khattri
On Wed, 16 Nov 2005, kashani wrote: We've got a number of customers that use Geotrust which is significantly cheaper than Verisign/Thwate. Someone also uses Starfield which is dirt cheap. There is a technical issue when using certs no one has ever heard of before. Many times

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-19 Thread kashani
A. Khattri wrote: GeoTrust claim to have their root cert in 99% of the browsers out there... Claims and actually works are two different things. For the record IE 5 on the Mac is your big problem child. If it works with a particular cert *AND* the SSL options/env you're passing then you're

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-16 Thread kashani
Antoine wrote: Hi, We are going to set up ssl on a webserver at work and I guess that means we need a certificate... does anyone have any useful alternatives to Verisign? Are they really worth the name? We are not going to be doing any monetary transactions but our clients are very security

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-16 Thread Antoine
kashani wrote: Antoine wrote: Hi, We are going to set up ssl on a webserver at work and I guess that means we need a certificate... does anyone have any useful alternatives to Verisign? Are they really worth the name? We are not going to be doing any monetary transactions but our clients

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-16 Thread Antoine
Remember that your web server must be properly configured (http://httpd.apache.org/docs/2.0/ssl/ssl_howto.html) in order to offer any real security. The howto says SGC is only available with verisign - is this true? Cheers Antoine -- gentoo-user@gentoo.org mailing list

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-16 Thread Jonathan Nichols
If these clients *know* you, and *trust* you, and know anything about security, there is no reason why you couldn't get away with a self-signed cert. If not, http://www.instantssl.com/ I can second this. I will be buying my mail server certs through InstantSSL in a few weeks. So far, I've

[gentoo-user] OT - SSL certificate authorities

2005-11-15 Thread Antoine
Hi, We are going to set up ssl on a webserver at work and I guess that means we need a certificate... does anyone have any useful alternatives to Verisign? Are they really worth the name? We are not going to be doing any monetary transactions but our clients are very security conscious (who

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-15 Thread John Jolet
On Tuesday 15 November 2005 14:43, Antoine wrote: Hi, We are going to set up ssl on a webserver at work and I guess that means we need a certificate... does anyone have any useful alternatives to Verisign? Are they really worth the name? We are not going to be doing any monetary transactions

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-15 Thread Jarry
Antoine wrote: Hi, We are going to set up ssl on a webserver at work and I guess that means we need a certificate... does anyone have any useful alternatives to Verisign? Are they really worth the name? Well, If you really need official certificate from some CA, have a look in your

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-15 Thread Mike Williams
On Tuesday 15 November 2005 20:43, Antoine wrote: We are going to set up ssl on a webserver at work and I guess that means we need a certificate... does anyone have any useful alternatives to Verisign? Are they really worth the name? We are not going to be doing any monetary transactions but

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-15 Thread David Mallwitz
Antoine wrote: Hi, We are going to set up ssl on a webserver at work and I guess that means we need a certificate... does anyone have any useful alternatives to Verisign? Are they really worth the name? We are not going to be doing any monetary transactions but our clients are very security

Re: [gentoo-user] OT - SSL certificate authorities

2005-11-15 Thread A. Khattri
On Tue, 15 Nov 2005, Antoine wrote: We are going to set up ssl on a webserver at work and I guess that means we need a certificate... does anyone have any useful alternatives to Verisign? Are they really worth the name? We are not going to be doing any monetary transactions but our clients