Which ssl is best: go daddy vs comodo vs rapid etc?

[zenartman]

which ssl is better in terms of price, browser recognisability, etc? Go Daddy seems to be used by many people. How well is it recognised by browsers? Is it really bad, what are best alternatives? My shared ssl seems too slow and causes warnings. Any suggestion? Thank you all.

[scottb]

I recommend the Comodo Instant SSL as being the best price for a quality certified SSL.

It is recognized by most browsers and the support is very good.

http://www.instantssl.com/

[mtnguy]

Secure Socket layer is misunderstood by the vast majority of consumers (much to the delight of Comodo, Thawte and others).

Why is the most expensive ssl cert about 20x the cost of the least expensive ssl cert? The answer can be found in just one word; marketing. If you believe that you are getting a better product, well then, you are.

A single root, 256-bit (which by the way is limited by the browser that you are using at the moment) 99+% recognized CA (Certificate of Authority) is going to run you the princely sum of just under 20 bucks.

You can pay Thawte 20 times that if you like, but you will not get more cert for the money.

Wander over to EV1servers dot com and go through them to get your 256 bit cert. They advertise it as RapidSSL, but you will end up with an Equifax cert. Cool. They were selling them last year for 9.95 (not a typo), then they jumped their prices by 50% this year. Wow!

Your pocketbook will thank you and your customers will think you are just wonderful.

[mtnguy]

As an addendum, a single root cert is one where there is just one hop from the issuing authority to your website.

Chained roots go through multiple layers of decreasing authorities to finally place their blessing on the encryption between your ip and the destination ip.

Both of my sites: http://roundwoodstudio.com/shop (I can't keep inventory in it)
and http://highlandweb.net are both covered by individual certs from Equifax.

If you visit using FireFox, and slip an 's' after the http, your browser will tell you that the encryption is 256 bit. Military grade. And the RSA key that locks the cert is 1024 bit. (unhackable by humans)

Cool stuff.

[DogTags]

1. Do you need to be an EV1servers dot com client?

2. I didn't find Equifax. I found RapidSSL/GeoTrust (unless this is ultimately Equifax):

http://www.ev1servers.com/Dedicated/SSL/RapidSSL.aspx

3. Is the cert issued quickly? (I'm guessing so, but not sure)

Many thanks :-)

[misty]

I always use Comodo from
http://www.completessl.com/complete_ssl.php
Excellent service with hand holding support, if you are unsure
how to install etc

[mtnguy]

@DogTags

EV1 will sell to anybody (within reason).

The entire purchase process through EV1 and RapidSSL takes about 10 minutes, including RapidSSL's phone verification.

1. Generate your RSA key.
2. Use that to generate your CSR.
3. Go to EV1 and purchase the cert, pasting the CSR where directed.
4. They email you a link to go in at RapidSSL under their (I'm assuming) account.
5. Verify the info they got from your CSR.
6. Go through their automated phone verification.
7.RapidSSL emails you an Authorization link to finalize the order.
8. Presto. SSL hot and fresh, emailed to you direct from RapidSSL.


It is in fact an Equifax Secure cert. 256 bit. Just like mom used to make!