[Pugged] SSL options and providers

Angie Tollerson ciapug@ciapug.org
Mon, 23 Sep 2002 15:45:27 -0500


This is a MIME message. If you are reading this text, you may want to 
consider changing to a mail reader or gateway that understands how to 
properly handle MIME multipart messages.

--=_CF937068.FA9BF853
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Hmmmm..I'm wary of the instantssl.com site. For this reason: they brag
that verisign's certificate for one year with 128 bit encryption is
$895..what they don't mention is for that price you don't just get the
certificate..you also get your entire online merchant capabilities
package for a year.  With a manager keeping track of all your
transactions.  The certificate is a "bonus" thrown in.  But not the
price of just the cert. Misleading..and makes me wonder.
 
Angie Tollerson
Alliance Technologies Web Programmer
(515) 245-7628
tollerson@alliancetechnologies.net

>>> chettinger@efr.org 09/23/02 03:37PM >>>
A upcoming project at work will require me to look into SSL
certificates. Upon some initial looking I can across a small list of
providers but it generated some questions. I was wondering if anyone
here has had any specific experience or knowledge that may help me in my
selection.

The project I will be working will not be a shopping cart with credit
card transactions, mostly just dealing with securing confidential data
for transmission over the net. Securing data given in a form from with a
web site, also protected by a login. After reviewing some of the
providers options I am assuming their basic Secure Site Certificates
will fill my order just fine.

My first questions came after finding http://www.instantssl.com/ -
Instant SSL. Their packages
(http://www.instantssl.com/products/ssl.html) prices are
significant lower than that of other providers. For their basic Instant
SSL single Cert it is $125 a year... Verisign and other providers are in
the range of $450 for a year. It may be in the fine print the
difference.

Thawte, is another provider I found. http://www.thawte.com similar
prices to verisign.

Also found http://www.apache-ssl.org/ ??? "It is licensed under a
BSD-sytle license, which means, in short, that you are free to use it
for commercial or non-commercial purposes..." Is this a valid option for
my needs? Dave, you may need to answer this one specifically Mr. hosting
provider :)
Ok I will continue looking over each as well, but any suggestions would
be greatly appreciated.
-ch
_______________________________________________
Ciapug mailing list
Ciapug@ciapug.org 
http://cialug.org/mailman/listinfo/ciapug 


--=_CF937068.FA9BF853
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2719.2200" name=GENERATOR></HEAD>
<BODY style="MARGIN-TOP: 2px; FONT: 8pt Tahoma; MARGIN-LEFT: 2px">
<DIV><FONT size=2>Hmmmm..I'm wary of the instantssl.com site. For this reason: 
they brag that verisign's certificate for one year with 128 bit encryption is 
$895..what they don't mention is for that price you don't just get the 
certificate..you also get your entire online merchant capabilities package for a 
year.&nbsp; With a manager keeping track of all your transactions.&nbsp; The 
certificate is a "bonus" thrown in.&nbsp; But not the price of just the cert. 
Misleading..and makes me wonder.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT size=2>Angie Tollerson<BR>Alliance Technologies Web 
Programmer<BR>(515) 245-7628<BR><A 
href="mailto:tollerson@alliancetechnologies.net">tollerson@alliancetechnologies.net</A></FONT><BR><BR>&gt;&gt;&gt; 
chettinger@efr.org 09/23/02 03:37PM &gt;&gt;&gt;<BR>A upcoming project at work 
will require me to look into SSL certificates. Upon some initial looking I can 
across a small list of providers but it generated some questions. I was 
wondering if anyone here has had any specific experience or knowledge that may 
help me in my selection.<BR><BR>The project I will be working will not be a 
shopping cart with credit card transactions, mostly just dealing with securing 
confidential data for transmission over the net. Securing data given in a form 
from with a web site, also protected by a login. After reviewing some of the 
providers options I am assuming their basic Secure Site Certificates will fill 
my order just fine.<BR><BR>My first questions came after finding <A 
href="http://www.instantssl.com/">http://www.instantssl.com/</A> - Instant SSL. 
Their packages (<A 
href="http://www.instantssl.com/products/ssl.html)">http://www.instantssl.com/products/ssl.html)</A> 
prices are significant lower than that of other providers. For their basic 
Instant SSL single Cert it is $125 a year... Verisign and other providers are in 
the range of $450 for a year. It may be in the fine print the 
difference.<BR><BR>Thawte, is another provider I found. <A 
href="http://www.thawte.com/">http://www.thawte.com</A> similar prices to 
verisign.<BR><BR>Also found <A 
href="http://www.apache-ssl.org/">http://www.apache-ssl.org/</A> ??? "It is 
licensed under a BSD-sytle license, which means, in short, that you are free to 
use it for commercial or non-commercial purposes..." Is this a valid option for 
my needs? Dave, you may need to answer this one specifically Mr. hosting 
provider :)<BR>Ok I will continue looking over each as well, but any suggestions 
would be greatly 
appreciated.<BR>-ch<BR>_______________________________________________<BR>Ciapug 
mailing list<BR>Ciapug@ciapug.org<BR><A 
href="http://cialug.org/mailman/listinfo/ciapug">http://cialug.org/mailman/listinfo/ciapug</A><BR></DIV></BODY></HTML>

--=_CF937068.FA9BF853--