Re: What Verisign-free CAs are left?



Sebastian Gottschalk <seppi@xxxxxxxxx> wrote:

Thawte isn't very trustable either, you can get almost any eMail
certificate from them, even at the highest trust level, without even
revealing your identity.

Actually, I haven't found that at all. After numerous calls to/from South
Africa and their U.S. sales representative, who is brutal at returning phone
calls, we finally got our certificate. Had to jump through a few hoops along
the way. The verified everything like they were giving a merchant account.

A cheap $20 GoDaddy certificate isn't root-level, but it requires no
identification at all beyond a credit card. Takes five minutes to get. And
most customers using an SSL website with one will never be the wiser.

--
Quel-y is bangpath(at)sent.as ... remove NOSPAM when e-mailing a reply
.