Re: [cobalt-security] self signed certificate warnings

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Matthew Nuzum wrote:

> Thanks, these are some good points.
> I am open to a wildcard cert for $400, and asked that if anyone had a
> recommendation, to give it.

Did you get the spam from the guy at Thawte who reads the list?  I've
written him back and asked him to prove his product is better.  He says
I can get Thawte certs for only a dollar more, but if I buy them for a
dollar more I couldn't sell them for the same, now could I <smile>.

He says that GeoTrust sells wildcard certs on a per-server basis, but
hasn't given me a price on a cert good for 250 subdomains on one RaQ4; I
bet it's going to be over $400 that you can get from GeoTrust.

> As far as this "local" ca is concerned, I am creating a somewhat "low
> end" solution here and simply want to avoid some of the error messages
> people are getting.

Exactly.  I've never ran into a client that cares who the cert is issued
by as long as it works.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484