Re: GODaddy SSL certs

2004-10-15 Thread Damien McKenna
Tim Laureska wrote:

>Has anybody had experience with these... any issues... cost looks good
>  
>
There are loads of companies out there that do low-cost SSL certs, 
including one that does them for free!  What you have to be concerned 
about, however, is whether the Certificate Authority (the organization 
that tells the world your cert is legit) is supported by your visitor's 
browser - many aren't thus your visitors get a security warning.  What I 
recommend doing is checking to see what your browser stats are and test 
each one on the different certs you are considering - if they work, 
good, if not then avoid them.  Note that there is no security difference 
between an expensive one versus a cheap one, the difference is the 
perception for your visitors - if they get a weird popup they might get 
scared off.
-- 
*Damien McKenna* - Web Developer - [EMAIL PROTECTED] 

The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
"Nothing endures but change." - Heraclitus
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




Re: GODaddy SSL certs

2004-10-15 Thread Matt Robertson
ubiquity isn't up to the same standard that you get from Comodo, which
I'm using.  I pay $42.88 as a reseller per cert (being a reseller gets
me instant issuance as well).

The GoDaddy certs are about half that cost, but when I eventually
unburied their actual browser stats they were worse than Comodo
(InstantSSL) by a noticeable margin.  Forget exactly what it was now.

-- 
--Matt Robertson--
President, Janitor
MSB Designs, Inc.
mysecretbase.com
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




RE: GODaddy SSL certs

2004-10-15 Thread djones
I bought one from thawte for $19.00, at FreeSSL.com.  It works on  96% of
all browsers and we have never had a problem.  We use it in our development
environment, where who issues it isn't important.  For real world stuff I
always suggest a more recognized company like VeriSign or Geotrust.  Though
they all are just about the same, I feel that people are more comfortable
when the company is one that they have heard of.

David

-Original Message-
From: Damien McKenna [mailto:[EMAIL PROTECTED]
Sent: Friday, October 15, 2004 12:29 PM
To: CF-Talk
Subject: Re: GODaddy SSL certs

  Tim Laureska wrote:

  >Has anybody had experience with these... any issues... cost looks good
  >
  >
  There are loads of companies out there that do low-cost SSL certs,
  including one that does them for free!  What you have to be concerned
  about, however, is whether the Certificate Authority (the organization
  that tells the world your cert is legit) is supported by your visitor's
  browser - many aren't thus your visitors get a security warning.  What I
  recommend doing is checking to see what your browser stats are and test
  each one on the different certs you are considering - if they work,
  good, if not then avoid them.  Note that there is no security difference
  between an expensive one versus a cheap one, the difference is the
  perception for your visitors - if they get a weird popup they might get
  scared off.
  --
  *Damien McKenna* - Web Developer - [EMAIL PROTECTED]
  
  The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
  "Nothing endures but change." - Heraclitus
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




RE: GODaddy SSL certs

2004-10-15 Thread Tim Laureska
This is what they (god Daddy) shows on their site:

QUOTE:
Our root certificate - the Valicert Class 2 Policy Validation Authority
- is installed in the following browser versions

. Internet Explorer 5.01 and higher 
. AOL 5 and higher 
. Netscape 4.7 and higher 
. Opera 7.5 and higher. 
. Safari on Mac OS X 10.3.4 or higher 
. Mozilla (all versions) 
. Firefox (all versions) 
. Konqueror (all versions) 

That equals 99% total browser ubiquity

END QUOTE

-Original Message-
From: Matt Robertson [mailto:[EMAIL PROTECTED] 
Sent: Friday, October 15, 2004 12:31 PM
To: CF-Talk
Subject: Re: GODaddy SSL certs

ubiquity isn't up to the same standard that you get from Comodo, which
I'm using.  I pay $42.88 as a reseller per cert (being a reseller gets
me instant issuance as well).

The GoDaddy certs are about half that cost, but when I eventually
unburied their actual browser stats they were worse than Comodo
(InstantSSL) by a noticeable margin.  Forget exactly what it was now.

-- 
--Matt Robertson--
President, Janitor
MSB Designs, Inc.
mysecretbase.com
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




RE: GODaddy SSL certs

2004-10-15 Thread Tim Laureska
GoDaddy's a fairly well know name... yes, primarily domain name
registrations but..

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Friday, October 15, 2004 12:39 PM
To: CF-Talk
Subject: RE: GODaddy SSL certs

I bought one from thawte for $19.00, at FreeSSL.com.  It works on  96%
of
all browsers and we have never had a problem.  We use it in our
development
environment, where who issues it isn't important.  For real world stuff
I
always suggest a more recognized company like VeriSign or Geotrust.
Though
they all are just about the same, I feel that people are more
comfortable
when the company is one that they have heard of.

David

-Original Message-
From: Damien McKenna [mailto:[EMAIL PROTECTED]
Sent: Friday, October 15, 2004 12:29 PM
To: CF-Talk
Subject: Re: GODaddy SSL certs

  Tim Laureska wrote:

  >Has anybody had experience with these... any issues... cost looks
good
  >
  >
  There are loads of companies out there that do low-cost SSL certs,
  including one that does them for free!  What you have to be concerned
  about, however, is whether the Certificate Authority (the organization
  that tells the world your cert is legit) is supported by your
visitor's
  browser - many aren't thus your visitors get a security warning.  What
I
  recommend doing is checking to see what your browser stats are and
test
  each one on the different certs you are considering - if they work,
  good, if not then avoid them.  Note that there is no security
difference
  between an expensive one versus a cheap one, the difference is the
  perception for your visitors - if they get a weird popup they might
get
  scared off.
  --
  *Damien McKenna* - Web Developer - [EMAIL PROTECTED]
  
  The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
  "Nothing endures but change." - Heraclitus
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




Re: GODaddy SSL certs

2004-10-15 Thread Matt Robertson
And Comodo claims better compatibility (below).  I don't pay much
attention to percentage claims, as thats all they are with all of
these guys:  IE 5.00 is the default for a bare win2k install and I've
seen a disturbing amount of traffic using it.  Same with older NN's. 
The Opera stuff is just gravy.  Only a fraction of a percent in toto
anyway across all versions.

It wound up being maybe a 1-2 point pop based on my global stats. 
Remember also that GoDaddy has 25% 'revenue sharing' over a certain
price point, so that may add to the real price you pay if you are a
reseller.  I worked it out and the difference was like 15 bucks for a
cert I charge an installed fee of $130 for.  Not worth messing with to
shave a couple bucks.

Internet Explorer 5.00 and above 
Netscape 4.x and above 
AOL 5 and above 
Opera 5 and above 

Root Certificate comes pre-installed with: 

Windows 98SE 
Windows ME 
Windows 2000 
Windows XP 
Mac OS 8.5 
Mac OS 9.x 
Mac OS X 

-- 
--Matt Robertson--
President, Janitor
MSB Designs, Inc.
mysecretbase.com
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




Re: GODaddy SSL certs

2004-10-15 Thread Damien McKenna
Tim Laureska wrote:

>Our root certificate - the Valicert Class 2 Policy Validation Authority
>- is installed in the following browser versions
>  
>
Just as a warning, I've seen some sites state that and then end up with 
some visitors getting security warnings.  Just be careful and 
double-check their stats if it is important to you.
-- 
*Damien McKenna* - Web Developer - [EMAIL PROTECTED] 

The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
"Nothing endures but change." - Heraclitus
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




RE: GODaddy SSL certs

2004-10-15 Thread Tim Laureska
Where can you go to "check their stats"?

-Original Message-
From: Damien McKenna [mailto:[EMAIL PROTECTED] 
Sent: Friday, October 15, 2004 1:38 PM
To: CF-Talk
Subject: Re: GODaddy SSL certs

Tim Laureska wrote:

>Our root certificate - the Valicert Class 2 Policy Validation Authority
>- is installed in the following browser versions
>  
>
Just as a warning, I've seen some sites state that and then end up with 
some visitors getting security warnings.  Just be careful and 
double-check their stats if it is important to you.
-- 
*Damien McKenna* - Web Developer - [EMAIL PROTECTED] 

The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
"Nothing endures but change." - Heraclitus
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




Re: GODaddy SSL certs

2004-10-15 Thread Damien McKenna
Tim Laureska wrote:

>Where can you go to "check their stats"?
>  
>
Double-check them yourself, as I suggested in a previous email.
-- 
*Damien McKenna* - Web Developer - [EMAIL PROTECTED] 

The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
"Nothing endures but change." - Heraclitus
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




RE: GODaddy SSL certs

2004-10-15 Thread Tim Laureska
Yeah, I know what you said in the previous email... but where do you
check stats like that ... is there a web site that tracks this or how
would you determine their "stats" other than relying on what they say in
their web site?

-Original Message-
From: Damien McKenna [mailto:[EMAIL PROTECTED] 
Sent: Friday, October 15, 2004 3:37 PM
To: CF-Talk
Subject: Re: GODaddy SSL certs

Tim Laureska wrote:

>Where can you go to "check their stats"?
>  
>
Double-check them yourself, as I suggested in a previous email.
-- 
*Damien McKenna* - Web Developer - [EMAIL PROTECTED] 

The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
"Nothing endures but change." - Heraclitus
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




Re: GODaddy SSL certs

2004-10-15 Thread Damien McKenna
Tim Laureska wrote:

>Yeah, I know what you said in the previous email... but where do you
>check stats like that ... is there a web site that tracks this or how
>would you determine their "stats" other than relying on what they say in
>their web site?
>  
>
I don't know of any off hand.  I would say that if a base install of IE 
5.0 (e.g. Windows 2000) can't support them then you might consider 
something else.
-- 
*Damien McKenna* - Web Developer - [EMAIL PROTECTED] 

The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
"Nothing endures but change." - Heraclitus
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




Re: GODaddy SSL certs

2004-10-15 Thread Matt Robertson
Tim,

Maybe what you should do is check the stats of the sites you propose
to install these certs for.  Do it for a 1-yr period.  If you see an
IE5.0 visit percentage, and NN4 (or whatever else that is visible that
doesn't conform to GoDaddy's capabilities) then you can expect that
percentage of users to be disenfranchised.

Respectfully, let me again mention we're talking like ten or fifteen
bucks here, assuming reseller accts on both services.  Its not a big
decision to have to make.   You'll lose more than that in time
fielding one phone call from a cranky client.

One thing I'd also like to counterpoint from an earlier post is that
customers are generally ignorant of where the cert comes from (i.e.
verisign, getrust etc.) other than to know it came from you and you
get the call if it doesn't work perfectly.

We'd probably better start winding this up as it is WOT.

-- 
--Matt Robertson--
President, Janitor
MSB Designs, Inc.
mysecretbase.com
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]




Re: GODaddy SSL certs

2004-10-15 Thread Umer Farooq
http://www.securityspace.com/s_survey/sdata/200409/certca.html

break down of market share.. I don't see ValiCert (go daddy) in there...

SSLReivew.com doesn't exist no more.. but checkout some of there pages 
on WayBackMachine.. http://www.archive.org/web/web.php

We use GeoTrust QuickSSL ($45.00/yr).. used to be with thawte but once 
veriSign took over.. kissed them goodby..

If you need a SSL seal.. then go with a certificate that provides one.. 
(GeoT QuickSSL Pro, VeriSign, Comodo.. etc..) stay away from vendors 
that relay on Baltimore Tech Root.. in the past they seem to have had 
many problems..

Damien McKenna wrote:
> Tim Laureska wrote:
> 
>  >Yeah, I know what you said in the previous email... but where do you
>  >check stats like that ... is there a web site that tracks this or how
>  >would you determine their "stats" other than relying on what they say in
>  >their web site?
>  >  
>  >
> I don't know of any off hand.  I would say that if a base install of IE
> 5.0 (e.g. Windows 2000) can't support them then you might consider
> something else.
> -- 
> *Damien McKenna* - Web Developer - [EMAIL PROTECTED]
> 
> The Limu Company - http://www.thelimucompany.com/ - 407-804-1014
> "Nothing endures but change." - Heraclitus
>
 [Todays Threads] 
 [This Message] 
 [Subscription] 
 [Fast Unsubscribe] 
 [User Settings]
 [Donations and Support]