[150198] in North American Network Operators' Group
Re: X.509 Certs For Personal Use
daemon@ATHENA.MIT.EDU (Christopher LILJENSTOLPE)
Sat Feb 18 14:05:19 2012
From: Christopher LILJENSTOLPE <cdl@asgaard.org>
In-Reply-To: <CAL9jLaaVSa+c+=aTb5kdj4huXLQ4_Rrj3tw=+gG0_o4-8=q0Eg@mail.gmail.com>
Date: Sat, 18 Feb 2012 11:04:21 -0800
To: Christopher Morrow <morrowc.lists@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_F22DFDD2-0DD5-41B5-88F0-4C0610E0924C
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
Greetings I'll +1 Chris's experience with startssl
On 18Feb2012, at 10.57, Christopher Morrow wrote:
> On Sat, Feb 18, 2012 at 10:44 AM, John Peach =
<john-nanog@johnpeach.com> wrote:
>> On Sat, 18 Feb 2012 14:27:05 +0100
>> Phil Regnauld <regnauld@nsrc.org> wrote:
>>=20
>>> toor (lists) writes:
>>>> I use http://www.startssl.com/ for all my personal certifcates. I =
have
>>>> not had any issues with the validations (once you have an account =
you
>>>> can validate a domain by sending an email to a predefined list of
>>>> contact addresses) and the certificates are issued instantly.
>>>=20
>>> "Your request is being held up for review by our personnel".
>>>=20
>>> Up to 6 hours. Must be their definition of instant :)
>>=20
>> It's nice to see that they actually do random reviews, rather than =
just
>> issuing everything requested. I use startssl and have not had =
anything
>> held for review.
>=20
> I've had most of mine held, but almost always I get a response in side
> of 20 mins. Really, what I care about here is:
> 1) cert validates in almost all clients (mozilla/chrome/mail.app)
> 2) controlled/secured by my key, not something made up on the server =
side
> 3) not paying money for random bytes.
>=20
> it works and eddy's pretty quick on requests.
>=20
> -chris
>=20
>>>=20
>>> Cheers,
>>> Phil
>>>=20
>>=20
>>=20
>> --
>> John
>>=20
>=20
-- =20
=E6=9D=8E=E6=9F=AF=E7=9D=BF
Check my PGP key here: https://www.asgaard.org/~cdl/cdl.asc
Current vCard here: https://www.asgaard.org/~cdl/cdl.vcf
--Apple-Mail=_F22DFDD2-0DD5-41B5-88F0-4C0610E0924C
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
iQEcBAEBAgAGBQJPP/Y4AAoJEGmx2Mt/+Iw/6Q8H/1sF1d/fUK8duqL4+5jpC8aq
F0uKTvMAC1SW/VThs+1PFoFUJQMx74Np1aHYS0Ow4YFVZ5PXDv3Kr23CKqU2Q32K
8+NoUkT3IzgMKgDjfQGRBmgI5zSQ0le9iZkQYQBiADFlHdd3H8Cvc7+jOIPT/r5C
QN0vqPxElY2DQ9ghvrjK3Gv8fl7uvsQGdpcIfFNZoMlRxnnXYwj03bDe4coX6RHe
KljnsucAa/chVHnYhQdP8gcDNvH92PuFhRYTeb+FetCcV5ONhivOLrwlP3iqPHjn
vAQOWbPzq0SwiS9tGVtHhfa8rHbUK25F2V1StB0gQOx/l/0NvvjABZiaI+HDGRw=
=9EAV
-----END PGP SIGNATURE-----
--Apple-Mail=_F22DFDD2-0DD5-41B5-88F0-4C0610E0924C--
