Re: X.509 Certs For Personal Use - Follow Up

2012-02-20 Thread Leo Bicknell
I received a number of interesting replies, most off-list, so I thought I would summarize and perhaps restart the discussion. Many folks pushed the run your own CA idea. While I get that works, and even secures the communication, if you run a web site accessed by random folks it will confuse

Re: X.509 Certs For Personal Use

2012-02-18 Thread toor
I use http://www.startssl.com/ for all my personal certifcates. I have not had any issues with the validations (once you have an account you can validate a domain by sending an email to a predefined list of contact addresses) and the certificates are issued instantly. On Sat, Feb 18, 2012 at

Re: X.509 Certs For Personal Use

2012-02-18 Thread Phil Regnauld
toor (lists) writes: I use http://www.startssl.com/ for all my personal certifcates. I have not had any issues with the validations (once you have an account you can validate a domain by sending an email to a predefined list of contact addresses) and the certificates are issued instantly.

Re: X.509 Certs For Personal Use

2012-02-18 Thread John Peach
On Sat, 18 Feb 2012 14:27:05 +0100 Phil Regnauld regna...@nsrc.org wrote: toor (lists) writes: I use http://www.startssl.com/ for all my personal certifcates. I have not had any issues with the validations (once you have an account you can validate a domain by sending an email to a

Re: X.509 Certs For Personal Use

2012-02-18 Thread Phil Regnauld
John Peach (john-nanog) writes: Your request is being held up for review by our personnel. Up to 6 hours. Must be their definition of instant :) It's nice to see that they actually do random reviews, rather than just issuing everything requested. I use startssl and have

Re: X.509 Certs For Personal Use

2012-02-18 Thread Sven Olaf Kamphuis
Are there any providers that target someone with my desires? What providers do NANOG folks use for their _personal_ needs? none at all, we choose NOT to make ourselves dependant on external suppliers as far as posibble and this includes NOT having SSL which is lacky in encryption, as well

Re: X.509 Certs For Personal Use

2012-02-18 Thread Christopher Morrow
On Sat, Feb 18, 2012 at 10:44 AM, John Peach john-na...@johnpeach.com wrote: On Sat, 18 Feb 2012 14:27:05 +0100 Phil Regnauld regna...@nsrc.org wrote: toor (lists) writes: I use http://www.startssl.com/ for all my personal certifcates. I have not had any issues with the validations (once

Re: X.509 Certs For Personal Use

2012-02-18 Thread Christopher Morrow
On Sat, Feb 18, 2012 at 11:37 AM, Phil Regnauld regna...@nsrc.org wrote: John Peach (john-nanog) writes:     Your request is being held up for review by our personnel.     Up to 6 hours. Must be their definition of instant :) It's nice to see that they actually do random reviews, rather

Re: X.509 Certs For Personal Use

2012-02-18 Thread Christopher LILJENSTOLPE
Greetings I'll +1 Chris's experience with startssl On 18Feb2012, at 10.57, Christopher Morrow wrote: On Sat, Feb 18, 2012 at 10:44 AM, John Peach john-na...@johnpeach.com wrote: On Sat, 18 Feb 2012 14:27:05 +0100 Phil Regnauld regna...@nsrc.org wrote: toor (lists) writes: I use

X.509 Certs For Personal Use

2012-02-17 Thread Leo Bicknell
On the heals of some of the most productive conversation I've seen on NANOG in ages, let me try another topic! I suspect most people on NANOG are in the same boat that I'm in, we operate some small number of domains for ourselves, friends, family, and projects we like. I suspect many of us are

Re: X.509 Certs For Personal Use

2012-02-17 Thread John Levine
I use these guys: http://www.cheapssls.com/ They sell Geotrust and Comodo certs for under $10/yr. The hassle level is quite low. First you order a cert providing the usual billing info, then you go to their web site, pick the order you just paid for, go to a screen where you paste in your