Re: SSL Certificates and ... Providers

2012-12-27 Thread Peter Kristolaitis
Yes, some SSL providers (mostly the overpriced ones) like to license their certs on a per-server basis. If you read the contract language, this is how it's written. However, this is strictly a contractual issue, not a technical one. It's just a way to squeeze more money out of people who

Re: SSL Certificates and ... Providers

2012-12-27 Thread John Adams
Many vendors do this and I highly recommend someone like Digicert that won't play the per-machine licensing game with you. Sent from my iPhone On Dec 27, 2012, at 11:47 AM, Blake Pfankuch bl...@pfankuch.me wrote: Ok, so this might be a little off topic but I am trying to validate something

Re: SSL Certificates and ... Providers

2012-12-27 Thread Andrew Latham
On Thu, Dec 27, 2012 at 2:47 PM, Blake Pfankuch bl...@pfankuch.me wrote: Ok, so this might be a little off topic but I am trying to validate something a vendor is telling me and hoping some people here have expertise in this area... I am working with a SSL certificate provider. I am trying

Re: SSL Certificates and ... Providers

2012-12-27 Thread Larry LaBas
I did and it was vendor dependent which is why I switched a year and a half ago. TTFN, Larry http://www.linkedin.com/in/llabas On Dec 27, 2012, at 11:47, Blake Pfankuch bl...@pfankuch.me wrote: Ok, so this might be a little off topic but I am trying to

Re: SSL Certificates and ... Providers

2012-12-27 Thread William Herrin
On Thu, Dec 27, 2012 at 2:47 PM, Blake Pfankuch bl...@pfankuch.me wrote: Vendor is telling me that the Wildcard certificates are licensed per physical device it is installed on. If you stay at a $200 hotel, you pay an extra $10 for Internet access. If you stay at a $40 motel, Internet is

RE: SSL Certificates and ... Providers

2012-12-27 Thread Blake Pfankuch
Thanks everyone for the quick responses. Our stuff is currently through Verisign because of the reliability of the name and the nature of the industry. Any suggestions for who I should look at to replace them with? I know I will be saving money, but looking to keep the name reliability as

Re: SSL Certificates and ... Providers

2012-12-27 Thread Ken A
I've found rapidssl wildcards are generally the cheapest (~$120), and are not limited to a number of servers. In practice, neither are the other brands. Ken On 12/27/2012 1:47 PM, Blake Pfankuch wrote: Ok, so this might be a little off topic but I am trying to validate something a vendor is

Re: SSL Certificates and ... Providers

2012-12-27 Thread Jimmy Hess
On 12/27/12, Blake Pfankuch bl...@pfankuch.me wrote: It does make no sense, and I would say it is an unusual restriction, but a CA can put any certificate usage restriction they want in their policy, and technically, they have likely included a right to audit and issue out a revokation/CRL for

Re: SSL Certificates and ... Providers

2012-12-27 Thread Christopher Morrow
On Thu, Dec 27, 2012 at 3:37 PM, Blake Pfankuch bl...@pfankuch.me wrote: Our stuff is currently through Verisign because of the reliability of the name and the nature of the industry. verisign sold this business (like 2+ years ago?), maybe it's time to find someone else with a reliable name?

Re: SSL Certificates and ... Providers

2012-12-27 Thread Grant Ridder
Yes the Verisign auth stuff is done by Symantic as of 2010. -Grant On Thursday, December 27, 2012, Christopher Morrow wrote: On Thu, Dec 27, 2012 at 3:37 PM, Blake Pfankuch bl...@pfankuch.mejavascript:; wrote: Our stuff is currently through Verisign because of the reliability of the name

Re: SSL Certificates

2012-02-16 Thread John R. Levine
I suppose if you buy a SSL certificate, you should be looking for your CA to have insurance to reimburse the cost of the certificate should that happen, and an ironclad refund clause in the agreement/contract under which a SSL cert is issued These certs cost $9.00. You're not going to

Re: SSL Certificates

2012-02-16 Thread Christopher Morrow
On Thu, Feb 16, 2012 at 8:33 AM, John R. Levine jo...@iecc.com wrote: I suppose if you buy a SSL certificate,  you should be looking for your CA to have insurance to reimburse the cost of the certificate should that happen,   and an ironclad   refund  clause in the agreement/contract  under

Re: SSL Certificates

2012-02-16 Thread Leo Bicknell
In a message written on Thu, Feb 16, 2012 at 12:57:25AM -0600, Jimmy Hess wrote: There is a risk that any CA issued SSL certificate signed by _any_ CA may be worthless some time in the future, if the CA chosen is later found to have issued sufficient quantities fraudulent certificates, and

Re: SSL Certificates

2012-02-16 Thread John R. Levine
These certs cost $9.00.  You're not going to get much of an insurance policy at that price. again, startssl.com - free. why pay? it's (as you say) not actually buying you anything except random bits anyway... if you can get them for free, why would you not do that? The free ones are supposed

Re: SSL Certificates

2012-02-16 Thread Jeroen Massar
On 2012-02-16 17:13 , Christopher Morrow wrote: On Thu, Feb 16, 2012 at 8:33 AM, John R. Levine jo...@iecc.com wrote: I suppose if you buy a SSL certificate, you should be looking for your CA to have insurance to reimburse the cost of the certificate should that happen, and an ironclad

Re: SSL Certificates

2012-02-16 Thread John Levine
In article 20120216162108.ga11...@ussenterprise.ufp.org you write: -=-=-=-=-=- In a message written on Thu, Feb 16, 2012 at 12:57:25AM -0600, Jimmy Hess wrote: There is a risk that any CA issued SSL certificate signed by _any_ CA may be worthless some time in the future, if the CA chosen is

Re: SSL Certificates startssl.com

2012-02-16 Thread James Triplett
On (16/02/12 11:13), Christopher Morrow wrote: again, startssl.com - free. why pay? it's (as you say) not actually buying you anything except random bits anyway... if you can get them for free, why would you not do that? They may not charge money, but it's not really free. You have to

Re: SSL Certificates

2012-02-16 Thread George Herbert
On Wed, Feb 15, 2012 at 10:57 PM, Jimmy Hess mysi...@gmail.com wrote: On Wed, Feb 15, 2012 at 6:49 PM, George Herbert george.herb...@gmail.com wrote: On Wed, Feb 15, 2012 at 4:17 PM, John Levine jo...@iecc.com wrote: The problem with anything related to Verisign at the moment is that The

Re: SSL Certificates

2012-02-15 Thread Ask Bjørn Hansen
On Jan 6, 2012, at 6:15, Michael Carey wrote: Looking for a recommendation on who to buy affordable and reputable SSL certificates from? Symantec, Thawte, and Comodo are the names that come to mind, just wondering if there are others folks use. Almost everyone are basically just selling an

Re: SSL Certificates

2012-02-15 Thread John Levine
Almost everyone are basically just selling an activation with one of the SSL certificate authorities. I usually buy a RapidSSL (Verisign) certificate from https://www.sslmatrix.com/ -- they seem to have some of the best prices and the rapidssl enrollment process is very efficient (at least for

Re: SSL Certificates

2012-02-15 Thread George Herbert
On Wed, Feb 15, 2012 at 4:17 PM, John Levine jo...@iecc.com wrote: Almost everyone are basically just selling an activation with one of the SSL certificate authorities. I usually buy a RapidSSL (Verisign) certificate from https://www.sslmatrix.com/ -- they seem to have some of the best prices

Re: SSL Certificates

2012-02-15 Thread bmanning
On Thu, Feb 16, 2012 at 12:17:00AM -, John Levine wrote: Almost everyone are basically just selling an activation with one of the SSL certificate authorities. I usually buy a RapidSSL (Verisign) certificate from https://www.sslmatrix.com/ -- they seem to have some of the best prices

Re: SSL Certificates

2012-02-15 Thread Jimmy Hess
On Wed, Feb 15, 2012 at 6:49 PM, George Herbert george.herb...@gmail.com wrote: On Wed, Feb 15, 2012 at 4:17 PM, John Levine jo...@iecc.com wrote: The problem with anything related to Verisign at the moment is that The possibility of their root certs being compromised is nonzero. The

Re: SSL Certificates

2012-01-09 Thread Henry Yen
verisign, who used to own geotrust (who owns rapidssl) was sold to symantec last year. or some similar swapping of chain links. anyway, for some, the symantec umbrella might be a polarizing factor. On Fri, Jan 06, 2012 at 09:08:28AM -0600, gra...@g-rock.net wrote: We use rapidssl. Seems to be

Re: SSL Certificates

2012-01-09 Thread Henry Yen
On Fri, Jan 06, 2012 at 10:08:55AM -0500, Christopher Morrow wrote: From: Michael Carey [mailto:mca...@kinber.org] Sent: Friday, January 06, 2012 9:15 AM To: nanog@nanog.org Subject: SSL Certificates Looking for a recommendation on who to buy affordable and reputable SSL certificates

Re: SSL Certificates

2012-01-09 Thread Henry Yen
netsol was bought by web.com. out of the frying pan ... ? On Fri, Jan 06, 2012 at 09:27:27AM -0500, Josh Baird wrote: We typically stick with Network Solutions, and DigiCert for SANcertificates.  VeriSign's prices are just insane. On Fri, Jan 6, 2012 at 9:15 AM, Michael Carey

Re: SSL Certificates

2012-01-06 Thread Alexander McMillen
AlphaSSL is pretty solid, priced right too. -- Alexander McMillen Chief Executive Officer Sliqua Enterprise Hosting, Inc. - AS32740 Serving up scale and service since 2002. Is your mission critical?™ 1-877-4-SLIQUA - http://www.sliqua.com - http://www.isyourmissioncritical.com On Jan 6, 2012, at

Re: SSL Certificates

2012-01-06 Thread Josh Baird
We typically stick with Network Solutions, and DigiCert for SANcertificates.  VeriSign's prices are just insane. On Fri, Jan 6, 2012 at 9:15 AM, Michael Carey mca...@kinber.org wrote: Looking for a recommendation on who to buy affordable and reputable SSL certificates from?  Symantec, Thawte,

RE: SSL Certificates

2012-01-06 Thread Matthew Huff
I've had good experience with Entrust. One thing to be careful with is some mobile devices (especially older Android ones) have limited root certificates. Network Solutions and Entrust work, some others, not so much. From my experience Android 2.3+ has most of the common root certs, but

RE: SSL Certificates

2012-01-06 Thread Blake T. Pfankuch
. -Original Message- From: Matthew Huff [mailto:mh...@ox.com] Sent: Friday, January 06, 2012 7:32 AM To: 'Michael Carey'; nanog@nanog.org Subject: RE: SSL Certificates I've had good experience with Entrust. One thing to be careful with is some mobile devices (especially older Android ones

Re: SSL Certificates

2012-01-06 Thread gra...@g-rock.net
We use rapidssl. Seems to be ok across the board. No reports otherwise. Sent from my HTC on the Now Network from Sprint! - Reply message - From: Michael Carey mca...@kinber.org Date: Fri, Jan 6, 2012 8:15 am Subject: SSL Certificates To: nanog@nanog.org Looking for a recommendation on

Re: SSL Certificates

2012-01-06 Thread Christopher Morrow
From: Michael Carey [mailto:mca...@kinber.org] Sent: Friday, January 06, 2012 9:15 AM To: nanog@nanog.org Subject: SSL Certificates Looking for a recommendation on who to buy affordable and reputable SSL certificates from?  Symantec, Thawte, and Comodo are the names that come to mind, just

Re: SSL Certificates

2012-01-06 Thread Ken A
theSSLstore has good reseller pricing on a variety of certs. ~ $10 domain validated rapidssl certs in about 5 minutes. More expensive and time consuming certs are available, Verisign, Geotrust, Thawte, greenbars, wildcards, etc.. Ken On 1/6/2012 8:15 AM, Michael Carey wrote: Looking for a

Re: SSL Certificates

2012-01-06 Thread Paul Norton
I second The SSL Store (http://www.thesslstore.com/) -- Paul Norton Systems Administrator Neoverve - www.neoverve.com Neoverve Blog - http://blog.neoverve.com/ On 1/6/2012 7:31 AM, Ken A wrote: theSSLstore has good reseller pricing on a variety of certs. ~ $10 domain validated rapidssl certs