SSL

[DRE]

So I saw: http://danconnor.com/post/50f65364a0fd5fd1f7000001/avoid_startcom_startssl_like_the_plague_

Then I saw: http://www.thewhir.com/web-hosting-...ertificate-services-following-security-breach

Which made me think of: http://en.wikipedia.org/wiki/PRISM_(surveillance_program)

 

[DRE]

Currently looking at http://www.cheapssls.com/

Google searching reviews of their SSL's. $4.99 is pretty cheap.

Edit:

K after enough digging I've decided on CheapSSLS
http://www.webhostingtalk.com/showthread.php?t=1015819
http://lowendtalk.com/discussion/7877/any-good-experience-with-cheap-ssl-recently

 

[rdn]

I'm using this: https://www.namecheap.com/ssl-certificates/geotrust-ssl-certificates.aspx
GeoTrust > Rapidssl

 

[Carsten^]

I use SSL for everything as well, cheapssl is where I purchased my certificate from as well.. I don't see much of an advantage to buying the more expensive ones when I am not doing any secure financial transactions...

EV would look good but I can't be damned with all the paperwork and other validation requirements.

 

[TPerry]

That explains the passport.

Yeah, we don't need them to go from one side of the continent to the other.
I've never had one and since I don't plan on ever getting out of NA don't see the need in giving the gubbermint more money for something I'd never use.
I've debated getting a certificate - but since my sites are hobby and aren't intended to bring in any income it's an expense I'm not going to pursue. I've got enough of those already related to them!

 

[Null]

I went with AlphaSSL today, they seem OK.

I just need to purchase @digitalpoint's add-on to handle the image side of things.

 

[Fred.]

I'm thinking about using SSL on my 2 forums.
But i still have a few questions.

I have 1 webserver with 1 IPv4 and soon 1IPv6

Then on my first forum I'm using.
domain.com + sub domain and cdn from js.staticdomain.com and data.staticdomain.com

On my second forum I'm using
domain.com and cdn from js.staticdomain.com and data.staticdomain.com

Can i use a StartSSL (class 2) certificate for all these domains? Or do i need more than one certificate?
So it's $ 60 for 2 years for all of this then?

 

[digitalpoint]

Yes... StartSSL allows wildcard (for all subdomains) as well as multi-domain certs. The price is $59.90 for 2 years for a class-2 cert for an individual. If you want the class-2 for an organization, the total cost is $119.80 for 2 years (you can't verify an organization without first verifying as an individual)... so $59.90 for the individual verification, then $59.90 for the organization verification.

As an example, we use the same certificate for 4 domains (unlimited sub-domains on each domain)...

digitalpoint.com
dpstatic.com
dp.ly
digitalpointads.com

 

[Fred.]

Yes... StartSSL allows wildcard (for all subdomains) as well as multi-domain certs. The price is $59.90 for 2 years for a class-2 cert for an individual. If you want the class-2 for an organization, the total cost is $119.80 for 2 years (you can't verify an organization without first verifying as an individual)... so $59.90 for the individual verification, then $59.90 for the organization verification.

As an example, we use the same certificate for 4 domains (unlimited sub-domains on each domain)...

digitalpoint.com
dpstatic.com
dp.ly
digitalpointads.com

View attachment 65357

Nice! Thanks digitalpoint

I probably buy a class 2 certificate for an individual then.

 

[DRE]

I need only one page removed from SSL. How do you do that?

 

[Fred.]

I finally bought my class 2 certificate from StartSSL and installing it now. It's on my name.

But I have a problem. I would like to use it for a few domains.

You attempted to reach server02.domain.com, but instead you actually reached a server identifying itself as Fred.

Does anyone know how or where can i change this so it takes the right domain name? I'm using directadmin.

Thanks

 

[TPerry]

I finally bought my class 2 certificate from StartSSL and installing it now. It's on my name.

But I have a problem. I would like to use it for a few domains.



Does anyone know how or where can i change this so it takes the right domain name? I'm using directadmin.

Thanks

If I'm not mistaken, the Class 2 can only be used on one domain (the one you set the key up with). You have to buy an individual class 2 for each domain (or at leas I did). If you got the PositiveSSL Multi-Domain (what I'm thinking about getting since I still have several more I would like to do) then you can set up more than one.

EDIT:
You get 3 free domains with that one and each additional is $12.88. I think I'll just pay the $9 a year for each individual. Comes out cheaper.

 

[Mike Edge]

You need a second certificate signed to fred.you-domain.com (your host name) You then install that one to your non-apache services.

 

[Fred.]

It's a multi-domain / sub domain certificate
I think I got it now. I've added the domains to the certificate. I'm waiting for verification from StartSSL now.

 

[Fred.]

I finally switched my largest forum to SSL. I noticed that it is a bit slower now.
I think I have to look into mod_pagespeed and SPDY (I'm on apache)
I'm thinking about switching to Nginx when I install a new server in a few months.
But for now I hope I can speed it up a little bit.
If anyone got some good information on mod_pagespeed or SPDY or other good stuff let me know I'm on CentOS.

 

[DRE]

I finally switched my largest forum to SSL. I noticed that it is a bit slower now.
I think I have to look into mod_pagespeed and SPDY (I'm on apache)
I'm thinking about switching to Nginx when I install a new server in a few months.
But for now I hope I can speed it up a little bit.
If anyone got some good information on mod_pagespeed or SPDY or other good stuff let me know I'm on CentOS.

Ask @MattW thats what I'm using.

 

[MattW]

I finally switched my largest forum to SSL. I noticed that it is a bit slower now.
I think I have to look into mod_pagespeed and SPDY (I'm on apache)
I'm thinking about switching to Nginx when I install a new server in a few months.
But for now I hope I can speed it up a little bit.
If anyone got some good information on mod_pagespeed or SPDY or other good stuff let me know I'm on CentOS.

If you are running Apache, https://code.google.com/p/mod-spdy/

However, you'd get much better results swapping to nginx and php-fpm and combining that with SPDY.

 

[TPerry]

If you are running Apache, https://code.google.com/p/mod-spdy/

However, you'd get much better results swapping to nginx and php-fpm and combining that with SPDY.

Or just OpenLiteSpeed (which comes with SPDY )

 

[Sheratan]

Nobody mention lighttpd in here?

 

[TPerry]

Nobody mention lighttpd in here?

Naw...we are only talking about REAL http servers.