Select SSL certificate provider

Secure Transmission needs to be considered for a system developed by the website recently. This article will be added to favorites and may be used in the future.

---------------- Cool SPLIT line ---------------

By qyb

As far as I can see, the vast majority of Chinese websites do not provide https encrypted transmission, which is not commensurate with the development level of China's Internet. Here, I will share my experience and experience in purchasing an SSL certificate here, hoping to help anyone who needs it.

First of all, we need to clarify the concept that SSL certificates are quite cheap compared to the charge/traffic fee/hardware depreciation fee. The Thawte certificates you bought are already the top brands, it only takes 99 $/year, and the cheapest certificate I have ever seen on the internet is 28 $/year. Therefore, providing SSL encrypted links is definitely something that Internet companies should do immediately.

Generally, a website only needs a server (that is, a domain name) to have a certificate. To address such requirements, the following products are available:
1. verisign's Secure Site, which is priced at $349 a year
2. thawte's SSL123, one-year price of 149 $
3. geotrust QuickSSL, Which is priced at $169 a year
4. RapidSSL, a one-year quotation of 49 $
5. InstantSSL, a one-year quotation of 49 $
6. TurboSSL, which is the cheapest and has no more than 30 $ online. If you are running an opensource project, you can even send a one-year certificate.

How can we select so many products? Please continue with my introduction:

If you want users to use SSL encrypted links without any access, you must have your certificate issued by the root certificate installed in the browser so that the error prompt dialog box is not displayed. In this wayA small threshold: Do you need to support IE5.0 users??

IE 5.0 is the default browser of Win98SE. Although it has been around for seven years, the browser users still occupy a considerable proportion in China, resulting in bad news, there are only a few commercial organizations with IE 5.0 pre-embedded root certificates, which are VeriSign/Thawte/CyberTrust. CyberTrust now issues a certificate through comodo, and InstantSSL is a product of comodo.

To sum up, if you want to support IE 5.0, you have three options: VeriSign/Thawte/InstantSSL. So why didn't you consider the cheapest InstantSSL?

Because InstantSSL issues certificates through the so-called "certificate chain", that is, it uses the browser-embedded CyberTrust to issue the certificate A, and then use this certificate A to issue the certificate B to sell it to you. In this way, you must configure the intermediate Certificate A When configuring the server. Some information about Certificate A must be handed over to the browser to prove its legitimacy during data transmission. The browser performs A step more than usual (defined in SSL 3.0). First, verify certificate a and then verify certificate B. There are two problems with this certificate chain method. One of them can refer to attacks on the RapidSSL website, and the other is the risk that the Mac platform cannot be used.

With the idea of less risk and less money, we chose Thawte

Since IE 5.01 (embedded in Win2000), there have been a lot of built-in root certificates for IE. For emerging websites, there is indeed a lot of reason to discard the Win98SE user before the browser. I strongly recommend that such websites use RapidSSL. The problem with TurboSSL is that it is also a certificate chain method, but there is no need to worry about the future in order to save 200 yuan.Another advantage of RapidSSL is that it can apply for a trial certificate, which is actually available and issued by a valid CA.Instead of using a false sample like verisign/thawte to fool the applicant with a test ca. In addition, RapidSSL is offering a discount for Wildcard SSL, which only costs 199 $/year.

If you want to save money, such as individual users, try TurboSSL of less than 30 $.

In addition, VeriSign buys Thawte and GeoTrust buys RapidSSL. In fact, the reliability of all certificates is the same, but different brands have different prices. GeoTrust claims that it is the world's second largest SSL certificate issuer, second only to VeriSign

RapidSSL provides the Chinese speech service to help you complete the application process. Thawte's service is really good. This is a South African company with Chinese people in it. I had a little trouble after purchasing Thawte. I first communicated with the technical support staff through the chatroom 24x5, then I called our office to communicate with each other.

The last step is to purchase Thawte SSL123. The purchase price from this link is only 99 $, but you need to fill in more privacy information to see how you choose.