If not StartSSL, the next best CA for individuals?

• To: [email protected]
• Subject: If not StartSSL, the next best CA for individuals?
• From: [email protected] (Guido Witmond)
• Date: Sat, 12 Apr 2014 21:12:43 +0200
• In-reply-to: <CANBOYLUoD+ZQz5iNLXOCtin4UBm-RfmAgfn_bo86PeE5m7OOyA@mail.gmail.com>
• References: <CANBOYLUoD+ZQz5iNLXOCtin4UBm-RfmAgfn_bo86PeE5m7OOyA@mail.gmail.com>

On 04/12/14 19:40, Eric Mill wrote:
> (Setting aside how awful the CA system is generally...)
> 
> For those who still have a need to participate in it, and for those 
> angry at StartCom's refusal to waive[1][2] revocation fees for their 
> free class 1 certs, what's the best CA for the job?
> 
> Even if not free, I'm looking to recommend[3] something priced 
> attractively for individuals and non-commercial uses. The friendlier 
> the interface, and the more reliable and principled the customer 
> service, the better.

Read the draft of Peter Gutmann's big book called Security Engineering. [1]

It tell (among things) the story that people accept scary warnings a
signal that a site is secure. Even if the opposite it true.

I suggest to create a self-signed certificate. (Unless you're a bank as
Firefox warns against that).

Guido.

1: https://www.cs.auckland.ac.nz/~pgut001/pubs/book.pdf

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 897 bytes
Desc: OpenPGP digital signature
URL: <http://cpunks.org/pipermail/cypherpunks/attachments/20140412/acb0106b/attachment.sig>

• References:
  • If not StartSSL, the next best CA for individuals?
    • From: [email protected] (Eric Mill)

• Prev by Date: If not StartSSL, the next best CA for individuals?
• Next by Date: Curious Intellectual Property Food-for-thought: "Live-forever Pingers"
• Previous by thread: If not StartSSL, the next best CA for individuals?
• Next by thread: Curious Intellectual Property Food-for-thought: "Live-forever Pingers"
• Index(es):
  • Date
  • Thread