Re: Certificates

[Michael Johnson <mjohnson () COMPLYGUARDNETWORKS COM>]

Just a comment about the quality of certs…

If you have anything to do with personally identifiable information going over the network via the SSL be sure you get 
at least 128b with less crypto turned OFF in order to be complaint with PCI and other requirements.

 

 

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Alex 
Keller
Sent: Thursday, September 09, 2010 5:31 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Certificates

 

hi John,

if your institution is a member of Incommon, i would recommend you look there first:
http://www.incommonfederation.org/cert/

if that is not an option, i would recommend InstantSSL which is run by Comodo:
http://www.instantssl.com/

InstantSSL certs run $70-150 each depending on how many years you sign up for. these do require an intermediary cert be 
installed ON YOUR SERVER, but the cert itself will be accepted by all major browsers without hassle.

GoDaddy is even cheaper, we use them for .com/.net domain registrations (and they are fine) but we don't use them for 
SSL certs, so i can't speak to that side of their business. as a side note we setup a Drupal hosted site with GoDaddy 
for a few months and found their uptime to be very poor...the final straw was a botched DNS update that had our 
education customers being sent to a foreign gambling site. nice :)

best,
alex


On 9/9/2010 2:13 PM, John Kaftan wrote: 

I need to buy some certificates.  I haven't had to buy any in years and wonder if anyone has found a low cost hassle 
free solution.
 
I want zero hassle with browsers not accepting certs.
 
Thanks.
 
 
 
John Kaftan 
Infrastructure Manager
Utica College 
315.792.3102
 
  





-- 
Alex Keller
Systems Administrator
Academic Technology, San Francisco State University
Office: Burk Hall 153 Phone: (415)338-6117 Email: alkeller () sfsu edu