[Pugged] SSL options and providers

Steve Langasek ciapug@ciapug.org
Mon, 23 Sep 2002 16:14:26 -0500


--KlAEzMkarCnErv5Q
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Sep 23, 2002 at 03:49:03PM -0500, David Champion wrote:
> Chris Hettinger wrote:
> >A upcoming project at work will require me to look into SSL certificates=
...
> >
> >My first questions came after finding http://www.instantssl.com/ - Insta=
nt=20
> >SSL.
> >...their basic Instant SSL single Cert it is $125 a year...
> > Verisign and other providers are in the range of $450 for a year.

> >Thawte, is another provider I found. http://www.thawte.com similar price=
s=20
> >to verisign.

> >Also found http://www.apache-ssl.org/ ??? "It is licensed under a=20
> >BSD-sytle license, which means, in short, that you are free to use it fo=
r=20
> >commercial or non-commercial purposes..." Is this a valid option for my=
=20
> >needs? Dave, you may need to answer this one specifically Mr. hosting=20
> >provider :)
> >Ok I will continue looking over each as well, but any suggestions would =
be=20
> >greatly appreciated.

> I haven't looked into the apache-ssl.org thing, or instantssl.

It's BSD, which means "do what you want with it but don't blame us if it
doesn't work".  Though, I prefer using regular Apache with mod_ssl.

> The reason that Verisign and Thawte are the same price is because they=20
> are the same company. One of those markets where the biggest player=20
> ended up buying all the competition. Sound familiar to any other company?

Actually, they're not the same price.  The VeriSign name demands a 100%
markup over the Thawte prices.

We recently renewed our 128-bit SSL cert from Thawte for < $200/yr.  The
cheapest 128-bit cert VeriSign advertises is $800+.

Steve Langasek
postmodern programmer

--KlAEzMkarCnErv5Q
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9j4QyKN6ufymYLloRAq6IAKCBpiQkt8afxp1tN/JkQxvEraVvXwCeMe7K
y1jJm3SZobuMBnaOEz1UIQ8=
=xmI8
-----END PGP SIGNATURE-----

--KlAEzMkarCnErv5Q--