Hacker News Reader

Comment by sandaru1 | Hacker News Reader

Any recommendations on where to buy a good ssl certificate?

http://www.startssl.com/ will give you a free ssl certificate for a single domain (actually, they'll give you one that covers a domain plus a single subdomain). Handy if you want to setup your own mailserver somewhere: the root certs are in all the main browsers & mail clients. You'll need to have your (web|mail)server serve up the intermediate cert as well as the leaf cert which can be a slight pain to setup, but apart from that it all works just fine.

The root cert is not in early versions of Android, due to a bug. I'm not sure when that was fixed. Unfortunately, you can't update root certificates in these versions.

Are there any phones out there that can't be at least updated to Froyo now, whether officially or not?

If you're geeky enough to want your own ssl cert then you're geeky enough to root your phone & install CyanogenMod.

I can't update my users' phones for them. Just pointing out that users stuck on older versions of Android, for whatever reason, may run into problems with the free cert. In the mail client, it will work if "TLS (if available)" is checked, but that's a departure from what other mail clients mean by that option.

If you check that then won't those users using an unencrypted connection?

gandi.net

if you register the domain with them, a standard ssl cert is included. Not sure if they issue certificates if the domain is somwhere else.

DigiCert. I am currently going through the EV validation process with them and they are absolutely briliant. Very quick customer service (including online chat), well designed and easy to use website, good prices. What's more to ask?

I work at a data center/hosting company and I can give you an AlphaSSL cert for $12.99 here just use the promo code "HACKERNEWS":

https://secure.springshosting.net/cart.php?a=add&pid=57

The website http://www.sslcertificatereviews.net/ lists the prices of the different certificate authority's SSLs. Plus there's coupons on the site too. Looks like a good place to do some SSL homework.

This advice from mdasen last year helped me (I wouldn't have known about the cheaper pricing through resellers otherwise): http://news.ycombinator.com/item?id=1318340

For a free cert check out:

https://github.com/ioerror/duraconf/blob/master/startssl/REA...

Digicert https://www.digicert.com/

Reply on news.ycombinator.com