Hacker News Reader

StartSSL is also not a widely accepted CA which means Apple Mail (and others) will likely complain the certificate is not issued by a trusted party. It's an easy fix, but one that shouldn't have to be done.

@rdl who is your go-to CA?

View on HN

StartSSL's roots are in a lot of things, they just don't have the class1 intermediate cert in places like Apple, and as a result it doesn't work by default. Which is pretty annoying, but easily fixed (provide the intermediate cert along with the end-user cert; since the root is already trusted, it does not bring up a warning.)

Not rdl but I use Comodo[1] which is free for personal use.

- [1] http://www.comodo.com/home/email-security/free-email-certifi...

Reply on news.ycombinator.com