Brian Dunning wrote:
I'm moving all my hosting to Rackspace, which means I'll need to buy all my own SSL certs. Does anyone have a favorite (cheap) source? I've found LiteSSL at $14.95/per. Thanks...
I wouldn't consider cost of certificates, but rather, the reputation of the certification authority (CA). Some CAs don't even verify information at all. I will never trust CAs that do not verify the identity of their applicants, regardless of the cost. I trust GlobalSign because they will never issue any certificate without verifying the identity of the applicant. This procedure applies to their PersonalSign certificates as well. http://www.globalsign.net/ In any case, check the certification authority for their verification procedure. If they do verify the identity, ask them what they would accept as verification. Make sure the procedure used is one that would be least likely to produce a fraudulent certificate. Also ask about how long it takes for them to revoke a certificate, and the procedure(s) used to do so. This is very important to know in case your private key gets compromised. All in all, be cautious in selecting a certification authority to issue you a certificate. Remember that it's sometimes better paying more for a certificate from a truly trustworthy CA. - KJM -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
