[Systems] certificates / SNI, SSO / passwords

[Luke Faraone]

On 08/26/2010 10:34 AM, Sascha Silbe wrote:
> Excerpts from Bernie Innocenti's message of Mon Aug 23 15:05:08 +0200 2010:
> 
>> To me, it's not a matter of money--we're talking about $50/year for a
>> wildcard certificate, quite affordable.
> I suppose those $50 only cover *.sugarlabs.org, not a combined certificate
> for *.sugarlabs.org + *.ole.org.

From the people I talked with at StartSSL, they charge only for what
requires them to do manual processing. Domain control validation is
automated, therefore free. Identity validation, which requires scanning
in some Gov't-issued documents, requires review on their end, and
therefore is 50USD for an individual, and another 50USD if you want it
to reflect your organization rather than the domain cert being owned (at
least in what is presented to the user) by "Luke Faraone" or "Bernie
Innocenti".

From what I understand, once this validation has been established,
you're able to generate wildcard certificates for domains without
additional fees. http://www.startssl.com/?app=40 indicates that multiple
domains on a certificate are supported.

http://forum.startcom.org/viewtopic.php?f=15&t=1802 is a user-compiled
list of which browsers recognize this CA. I have not tested as to
whether it works on the XO-1.

-- 
╒═════════════════════════════════════════════════════════════════╕
│Luke Faraone                          ╭Debian / Ubuntu Developer╮│
│http://luke.faraone.cc                ╰Sugar Labs, Systems Admin╯│
│PGP: 5189 2A7D 16D0 49BB 046B  DC77 9732 5DD8 F9FD D506          │
╘═════════════════════════════════════════════════════════════════╛

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
Url : http://lists.sugarlabs.org/private/systems/attachments/20100826/b64d3e0d/attachment.pgp