Re: [gentoo-user] OT - SSL certificate authorities

[John Jolet <john@jolet.net>]

On Tuesday 15 November 2005 14:43, Antoine wrote:
> Hi,
> We are going to set up ssl on a webserver at work and I guess that means
> we need a certificate... does anyone have any useful alternatives to
> Verisign? Are they really worth the name?
> We are not going to be doing any monetary transactions but our clients
> are very security conscious (who isn't!) and I have no experience in
> these matters. I am certain the boss will want verisign, as he buys a
> lot of stuff just for the name but if I can offer him a comparable
> alternative at a fraction of the cost he may go for it.
> Cheers
> Antoine

Well, from a security aspect, you can't get more secure than being your own 
ca.  you sign all your own certificates.  of course, then the clients will 
see that your ca isn't trusted, but who the hell trusts verisign these days?  
not me.  not after that search engine crud they pulled a few years ago.

-- 
John Jolet
Your On-Demand IT Department
512-762-0729
www.jolet.net
john@jolet.net
-- 
gentoo-user@gentoo.org mailing list