Web Hosting Talk







View Full Version : Self Signed SSL


tazd9t9
02-17-2002, 02:42 PM
Hi i have been using a shared SSL certificate and i am now moving to a plek control panel where i can offer a self signed SSL certificate, can anyone tell me the difference between these and say a twate one? are they any less secure?

thewitt
02-17-2002, 02:56 PM
A self-signed cert is not less secure, but it will pop up a warning message every time you have a visitor to your website telling them that the certificate is signed by an unknown or untrusted authority.

You may lose business over this if your visitors don't understand the warning. I suspect most don't...

-t

tazd9t9
02-17-2002, 02:58 PM
how much does it cost to buy an SSL certificate from a known company?

Ahmad
02-17-2002, 03:03 PM
Self signed certificates will generate browser errors to your clients saying that there is a problem with the certificate, which is that the certificate is issued by a party who you (the client, page visitor) did not choose to trust.

The commuinications will still be secure, but you should ask your visitors to ignore the error message (very unprofessional). Besides that, if they take your word for it and ignore the error, you will be vulnerable to a man-in-the-middle attack.

Personally, I wouldn't give any CC info on a page that gives me such an error.

mdrussell
02-17-2002, 03:04 PM
You can get one for about $100 from Geotrust.

Ahmad
02-17-2002, 03:06 PM
Hi thewitt,
It seems that you replied while I was typeing my reply :) sorry for that.

Originally posted by tazd9t9
how much does it cost to buy an SSL certificate from a known company?

I found this a couple of threads below ;)

http://www.webhostingtalk.com/showthread.php?s=&threadid=36268

tazd9t9
02-17-2002, 03:07 PM
at the moment i can use a shared thwate certificate it looks as tho if i am going to offer SSL which so far none of my clients have requested i will have to use my old hosting company which isnt really a problem i just wanted some info on it

Ahmad
02-17-2002, 03:08 PM
Originally posted by voxtreme-matt
You can get one for about $100 from Geotrust.

This one is really great! But its not as browser compatible as their other 179-USD cert. For me, I can live with that, depends on your audience.



<<EDIT: 179-USD cert, not 179-bit :D>>

<<2nd EDIT: s/now/not/ in the last edit comment ..


better go to bed now :D
>>

thewitt
02-17-2002, 03:09 PM
Originally posted by tazd9t9
how much does it cost to buy an SSL certificate from a known company?
GeoTrust QuickSSL is available for $95-99 a year.
Tucows Digital Cert from $135-160 a year.
GeoTrust eBusiness from $145-175 a year.

Depends on who is reselling. All have slightly different models for verifying who you are, however all support solid encryption and are recognized by most browsers.

-t

thewitt
02-17-2002, 03:11 PM
Originally posted by Ahmad
Hi thewitt,
It seems that you replied while I was typeing my reply :) sorry for that.[clip]
We all do it :).

-t

tazd9t9
02-17-2002, 03:13 PM
Cool thanks for the info i needed that :)

bitserve
02-18-2002, 05:04 PM
Great debate here:

http://www.webhostingtalk.com/showthread.php?s=&threadid=33992

superiorhost
02-18-2002, 08:31 PM
I would go with the geotrust certificates... they are 128 bit for a fraction of the cost of a 128 bit through verisign.

I had a dedicated cust that used a self made certifiacate. He increased sales by 300% when I told him to get a real cert that is accepted by browsers...

Man, these certificate companies have a real racket going don't they... 100+ bucks a year just to tell people that your page is already secure....

Tim L :cool:

Ahmad
02-19-2002, 11:41 AM
Originally posted by superiorhost

[snip ..]

Man, these certificate companies have a real racket going don't they... 100+ bucks a year just to tell people that your page is already secure....

[snip ..]



I couldn't agree anymore :rolleyes: