Re: SSL Certs

From: Keith W. McCammon (km@km.com)
Date: 01/27/03 

From: "Keith W. McCammon" <km@km.com>
Date: Mon, 27 Jan 2003 08:11:35 -0500

> 1) So as part of the wizard, if I request a cert from Verisign or some
one
> similar I presume there is a cost involved?

Yes. Verisign costs ~$800US. Others are slightly cheaper. Thawte is
supposed to be good.

> 2) Can I not produce my own cert as the connection will only be used for
> our own employee's and a third party signed cert is not really needed.

Yes. Install Windows 2000 Certificate Services, and you can then act as
your own CA, and issue a certificate for any server, user, client, etc. that
you'd like--at no cost. If you're primarily using this for your own user
base, then this is probably an adequate option.

Relevant Pages

  • Re: SSL Certs
    ... >> 1) So as part of the wizard, if I request a cert from Verisign or some ... Install Windows 2000 Certificate Services, and you can then act as ... > you'd like--at no cost. ...
    (microsoft.public.win2000.security)
  • Enterprise Subordinate CA signed by third party Commercial CA like Verisign/Thawte/etc
    ... about certificate services & PKI..... ... So that means we need a root CA ... the cost to do this seems a bit excessive. ... I have visited both Verisign & Thawte's sites, ...
    (microsoft.public.windows.server.security)
  • enterprise
    ... about certificate services & PKI..... ... So that means we need a root CA ... the cost to do this seems a bit excessive. ... I have visited both Verisign & Thawte's sites, ...
    (microsoft.public.windows.server.security)
  • Re: Proposal for a new PKI model (At least I hope its new)
    ... > Verisign is not going to send a notary to your house for $30. ... > indemnification to relying parties anyway, just to the cert holders. ... they ain't making money anyways. ... PKI is getting killed and it's going down with the Verisign ship. ...
    (sci.crypt)
  • Re: Huge discrepancy in "standards" of risk evaluation for theory vs. for practice in cryptology
    ... site's Verisign cert, or its Thawte cert, or its Hells Angels cert, ... Assume you have a certain amount of trust in an e-commerce vendor. ... CA issued the certificate for that e-commerce vendor) and avoid the ...
    (sci.crypt)