SSL incription pricing

All off topic discussions go here. Everything from the funny thing your cat did to your favorite tv shows. Non-programming computer questions are ok too.
Post Reply
User avatar
suthers
Member
Member
Posts: 672
Joined: Tue Feb 20, 2007 3:00 pm
Location: London UK
Contact:

SSL incription pricing

Post by suthers »

I want to set up a SSL secure area on a hosted website, but im told it costs around 100$, is this rubbish and if not is there a way of getting SSL for free?
Jules
User avatar
Solar
Member
Member
Posts: 7615
Joined: Thu Nov 16, 2006 12:01 pm
Location: Germany
Contact:

Post by Solar »

Installing SSL for e.g. your web- or mailserver is easily done if you know how. However, the certificate you use for your servers will in this case not be "signed" by any of the big certification authorities (CA's). Mail and web clients hold a list of "trusted" CA's, and if they come across a SSL certificate not signed by a CA on that list, show a warning requester the user has to explicitly acknowledge in order to use your SSL-protected service.

So, the $100 your webhoster mentioned could mean one, or both, of the things below:
  • They charge you $100 for enabling SSL services for your web presence,
  • they charge you $100 for providing you with a signed SSL certificate.
There are ways around both (like, getting yourself a vServer with root / Administrator privileges, install required software yourself, and get a SSL certificate signed by a "public" CA like CARoot), but they are not perfect. (Administering your own server can eat loads of your time and might not result in anything stable, useful, or even sane; and last time I looked none of the "public" CA's was actually recognized by any of the "big" webbrowsers.)

I hope this helps. If it's a one-time payment, the $100 offered by your webhoster isn't too bad an offer, actually. Getting a certificate signed by a big CA is something usually only open to enlisted businesses, and positively costs heaps of money.
Every good solution is obvious once you've found it.
Post Reply