Techie question

[laurierobey]

Okay, Verisign wants $1,000 for a 128-bit SSL certificate. GoDaddy offers a High-Assurance SSL Certificate for less than $100. Is there any reason not to get the certificate from GoDaddy (and I'm seriously asking if anyone knows some reason why they're so cheap or why Verisign is so expensive). Is there something Verisign has/does that GoDaddy doesn't? Is there any reason why Verisign is better?

Comments

the downside...according to sources...

[mammallamadevil.livejournal.com]

once you use GoDaddy on a server, you have to use it for all of your domains (so I have been told). I use GoDaddy and have not had any issues. Still, you have to go through a zillion advertisements to get what you want!

MLD

Re: the downside...according to sources...

[laurie-robey.livejournal.com]

Thanks! I'm not even sure now that they're going to want a certificate, but I'll present them with options if they want!

[hantamouse.livejournal.com]

Verisign root certificate is already installed in IE, GoDaddy certs will give users warnings until they decide to trust/install it? Maybe?

Will anyone trust it? GoDaddy security sounds to me like Fast Eddies Savings Bank.

Is GoDaddy income positive? Is it going to exist next year?

[laurie-robey.livejournal.com]

GoDaddy has been around for at least a few years, but yes, VeriSign does sound more like a "trustable" company. The quality of their certificate may be just as good. But it's a matter of what the public trusts.

Since posting this question, I've discovered in doing more research and talking with mamallamadevil that the GoDaddy certificates are probably just as good, but VeriSign has the name recognition going for it. With the gov't. cracking down on security, if they do decide they want a certificate, it'll probably be VeriSign. But it was primarily my boss who was lobbying for a certificate in the first place, not the client.

[hantamouse.livejournal.com]

Read your IE:InternetOptions:Content:Certificates:TrustedRoot for some ideas if you want to shop around.

[laurie-robey.livejournal.com]

The ironic thing I've discovered is there are two other "Trusted CAs," big ones: GeoTrust and Thawte. Both are now owned by VeriSign. A little market cornering going on there...