Re: Certification Authorities: StartSSL.com vs ipsCA.com vs ...

[Davi Leal]

> I am trying to get a free one, without any cost, at http://www.startssl.com/

https://gnuherds.org/ has a new certificate signed by StartCom Certification 
Authority.  It has been got without any cost!

  * Due to the StartCom Certification Authority (CA) is included in FireFox
    by default, it works out of the box FireFox 2.x and 3.0rc.

  * Safary is reported to work too but I have not checked it.


However, such new gnuherds.org certificate does not work out of the box on all 
browsers:

  * Konqueror includes the old StartCom root, but not the new one. There
    is still an open bug: http://bugs.kde.org/show_bug.cgi?id=138126

    Test: You can visit https://www.startcom.org which is signed by the
          old root, which is included in Konqueror.

  * Opera shows the below message:
     "It is not possible to verify that this is a valid certificate.

      The certificate for "StartCom Class 1 Primary Intermediate Server CA"
      is signed by the unknown Certificate Authority
      "StartCom Certification Authority".
     
  * Internet Explorer users have to import the CA root too.



I think the project's goal was make it easier for any-user, any-browser, to 
use the webapp.

So, IMHO the GNU Herds project should pay for a Certification Authority (CA) 
which is included by default on all browsers.

I have being told all the 'big' CA are included in all browsers: Firefox, 
Safary, Konqueror, Opera and IE.

I have not checked if http://certs.ipsCA.com is one of such 'big' ones.

What is the cheaper CA of the 'big' ones?


--
Slowly but surely.