Dave Townsend wrote: > Nelson B wrote: >> Dave Townsend wrote: >>> Nelson Bolyard wrote: >>>> $18/year is too expensive, eh? >>> Heh, this is true. My attempts to find cheap SSL certificates had only >>> yielded $100/per year jobs. Given that they are not that expensive I >>> have started doing a straw poll of authors to see whether that would be >>> too much or not. >> I have heard that SSL server certs are available for FREE from Startcom >> (one of the CAs already known to mozilla products) at this web page: >> http://cert.startcom.org/ >> >> I have not tried this, because I'm not trying to run an SSL server. >> But I figure it's worth trying out. > > I'm certainly looking into this, but so far my un-scientific straw poll > of add-on authors suggests that ssl certification would not be a viable > route. The cost of the certificate is one thing, then there is the > additional hosting costs (general web hosting does not have the unique > IP required),
There is no unique IP address required any more. Modern TLS implementations like the one in Mozilla products, allow the client and server to negotiate the host name over the SSL connection, before the server presents its cert, So that the server can pick the right cert. It's good old virtual hosting, done with https. Works well. Now, I could believe that many of these hosting companies don't yet have servers that know how to do that host name/cert negotiation. But if mozilla authors start to create a demand for that service, and they go to the hosting services that do offer it, that will cause more hosting services to offer it. > then there is just the complexity of getting and > installing such certificates. The administration part is generally the easy part. It only seems complex the first time, like going on a first date. :) -- Nelson B _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
