|
| |
|
|
bowker
Posts: 34
Joined: 6/30/2003
Status: offline
 |
SSL Wars: Verisign vs. Thawte - 7/8/2003 3:36:33
Does anyone have any thoughts about choosing a SSL certificate (128bit) and whether you would go with Verisign or Thawte? I learned that Thawte was owned by Verisign (a South African company with US offices) and that they offer a much cheaper 128 bit certificate using the same step-up technology as Verisign. Other than brand name recognition--which I am not convinced has permeated the web market when it comes to certificates--I cannot see why I' d go with Verisign over Thawte. In fact, I can get five 128 bit Thawte server certificates for the price of one Verisign certificate. I am pretty much convinced on going with Thawte, but was wondering if any of you had some thoughts on the issue.
Thanks in advance.
|
|
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/8/2003 4:57:40
I would go with neither.
I think you are right about brand recognition being low, which is one reason. The other is price. I would go with GeoTrust or InstantSSL, a lot cheaper and in my experience with better service.
http://www.geotrust.com/webtrust/
http://www.instantssl.com/
The idea that these things have to be outrageously expensive is one the Verisign has propagated for years. It isn' t so of course, just like it turned out that domains could cost less than $10 once they were not selling them.
_____________________________
Katherine
:: InKK Design :: InKK Domains
| |
|
|
|
Andy from Spain
Posts: 920
From: Ipswich
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/8/2003 11:34:00
Hi
I' ve always been happy with Thawte but have heard good things about the two companies Katherine mentions - I was just wondering though if it was just because they were cheaper - does anyone have any experience with working with either of them?
Cheers
Andy
_____________________________
Ecommerce software | Website templates
| |
|
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/8/2003 16:41:45
I have 3 sites using GeoTrust - all fine, no problems, excellent service all round.
Have not used InstantSSL, would be very interested in opinions.
Of course there is also OpenSSL, which is free but last time I looked at it I got a headache and gave up.
< Message edited by abbeyvet -- 7/8/2003 4:43:14 PM >
_____________________________
Katherine
:: InKK Design :: InKK Domains
| |
|
|
|
redcrew
Posts: 7
Joined: 5/2/2002
From: Canton, MI, USA
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/9/2003 14:44:39
I' ve been looking into certificates too. There' s a comparison at http://www.whichssl.com/ssl-certificate-comparison.html which shows various features, including warranty level.
The GeoTrust certificate looked promising, until I saw the warranty level was only $50 (US dollars). I visited the GeoTrust web site to learn more, but couldn' t find anything on their warranty level.
Deborah
< Message edited by redcrew -- 7/9/2003 2:45:06 PM >
| |
|
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/9/2003 14:58:10
What is the warrantly actually worth in real terms though? How likely is it ever to be needed, and if it is how likely that the amounts quoted will be actually available?
Remember the warranty only insures against a claim by your client for loss or damage as a result of the certifying authority misissuing a certificate. This is a very narrow and subscribed set of circumstances, so it seem that it is easy to quote huge figures and then sell the cert at a much higher price as result of perceived added value.
Effectively the warrantly protects the certifying authority - but you pay for it!!
Also, and I do not mean to be overly cynical here, but anyone who has tried to wrest a domain name from the arms of Verisign would be extremely dubious about the chances of getting actual money from them in any but the most extraordinary of circumstances.
_____________________________
Katherine
:: InKK Design :: InKK Domains
| |
|
|
|
xeerex
Posts: 77
Joined: 5/9/2002
From: Texas
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/9/2003 15:02:21
I' ve emailed InstantSSL twice now on a question without a response. Does anyone have any feedback on the following?
My host normally uses a shared certifcate which means that in my case any secure browsing is done on a separate physical server. This presents a problem obviously in e-commerce so I inquired if they would be willing to install a 3rd party certificate on my server and domain. They stated that they would.
Here is the problem, remembering I am new to CSR' s and SSL technology. Do I need to have the host generate a CSR? Can I generate one on my home test server and use it on my paid host' s server (we are both running Win2k Server)? What if I change hosts? Does the certificate go with me?
Any feedback is appreciated.
_____________________________
Webmaster in Perpetual Training
Xeerex The Wizard
aka Rex Moncrief
Web Design / Web Hosting / Graphics / eCommerce
| |
|
|
|
smcfarland
Posts: 680
From: Nashville, TN
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/9/2003 15:10:37
Here is another question (I agree with all of the above so far... and after almost a year, I still have not heard from Verisign re: someone hacking THEIR system and taking MY money)...
Is there really any advantage of getting your own SSL vs. using a shared one -- my host offers use of theirs for $2.00 per month with no setup fees and I was considering this for a few clients I host.
Otherwise, you CAN hook up a cart to Mal' s ecommerce for secure data collection.
_____________________________
Summer McFarland
Renter's ruined our home - Wanna help?
| |
|
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/9/2003 15:22:12
I think the main advantage of having your own SSL cert is that you have your own domain name appear in the addressbar rather than the convoluted one you tend to have with a shared cert. It looks more professional.
Also if people check the cert it is issued to your host, not you, which may not always fill them with confidence.
In the end, the data is encrytped no matter what way you go, which is the main object of the exercise.
It is amazing to me how little it all seems to matter to many people though. Just yesterday I was about to set up some paid listings in a niche portal to a site of mine. It required a cc payment of over $300, and I was expected to put the cc number in on a standard http: connection. This site has hundreds, possibly thousands of paid listings, visitor numbers in the hundreds of thousands a week and when I asked about another way of paying I was made to feel I was being very awkward and that nobody else had complained. Go figure.
By the way I think there is a little more information at this site than the one previously posted about sslcerts
http://www.whichssl.org/
it also may be a little more unbiased as the .com one is owned by Comedo, who own instantSSL!!
< Message edited by abbeyvet -- 7/9/2003 3:29:02 PM >
_____________________________
Katherine
:: InKK Design :: InKK Domains
| |
|
|
|
tcrawford
Posts: 26
From: Marietta GA USA
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/9/2003 15:34:45
I started using GeoTrust when they were still Equifax, about 2.5 years ago. We are very happy with their service and products. They offer discounts and simpler methods to resellers who prepurchase certificates and services.
Tom
| |
|
|
|
Shamrock
Posts: 3
Joined: 4/7/2003
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/13/2003 17:17:37
Would SSL be required if someone uses Pay Pal? In other words, does Pay-Pal take care of it for you?
_____________________________
shamrock
| |
|
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/13/2003 18:31:27
You do not need SSL if you are using PayPal or any other third party processor, such as 2CheckOut or Paysystems.
_____________________________
Katherine
:: InKK Design :: InKK Domains
| |
|
|
|
smcfarland
Posts: 680
From: Nashville, TN
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/13/2003 22:29:45
Speaking of non encrypted yet popular sites... ever ordered via Inktomi??
_____________________________
Summer McFarland
Renter's ruined our home - Wanna help?
| |
|
|
|
birwin
Posts: 1
Joined: 2/11/2005
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 2/11/2005 15:10:02
Look into www.sslassistant.com for an unbiased comparison of SSL certificates. They have a wizard that helps people determine which SSL Certificate is best for their needs.
| |
|
|
|
jjgm
Posts: 1
Joined: 7/29/2005
Status: offline
|
RE: SSL Wars: Verisign vs. Thawte - 7/29/2005 17:57:13
Does anyone have any input on GoDaddy's SSL? How does it compare to other, pros and cons? Any info will help.
Thank you
| |
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts
|
|
|
Printable Version 
