[FX.php List] [off] SSL Certs

[Andrew Denman]

That will probably depend on the company that is using the certificate.  In my company's case, the people we do secure transactions with know who we are and have been with us for several years. For us, the perceived trust added by the EV SSL doesn't justify the cost since we already have our customer's trust.  We just need a way to secure the transaction.

For a company that is actively going after new customers and/or mainly sells items through their website, the EV SSL could be a differentiator, but I don't have any data to back that up.  It could also help a lesser known company appear more legitimate.  I probably wouldn't use it for sites where customers have a pre-existing or close relationship with the business (i.e.: Ford creating a dealer's web portal), or where you just have user accounts (i.e.: Facebook, Twitter).  Definitely not for non-web user facing servers (i.e.: mail server).

Apparently banks and other financial companies have not felt an urgent need for them, as a quick survey of my accounts indicates most of them don't use an EV SSL.  I also cannot find any information from non-CAs with data about regular vs. EV SSL and how it affects user's behavior, so I have no 'independent' analysis other than my thoughts.

Andrew Denman

-----Original Message-----
From: fx.php_list-bounces at mail.iviking.org [mailto:fx.php_list-bounces at mail.iviking.org] On Behalf Of Jonathan Schwartz
Sent: Monday, December 13, 2010 4:02 PM
To: FX.php Discussion List
Subject: RE: [FX.php List] [off] SSL Certs

Point taken..they all work.

Pushing this a bit further...it is the EV "Green Bar" that I am asking about.

Who has seen the need for it? That is the core of my question.

Jonathan

At 2:36 PM -0600 12/13/10, Andrew Denman wrote:
>The only discernable difference browsers show between different types 
>of certificates are the 'regular' and EV (normal vs. green bar).  
>Otherwise they all work (from the end web user's perspective) exactly 
>the same in encrypting the session and making the lock icon show up. I 
>have not heard of anyone complaining about the source of an SSL 
>certificate, and we've used several companies in the past.
>
>There are differences in the service YOU receive from the SSL providers 
>in setting up and troubleshooting the certificate installation.  I 
>would pick someone based on the service you get and any features of the 
>SSL certificate that are important to your setup
>(e.g.: number of server installations, reissues, SANs).
>
>Andrew Denman
>
>-----Original Message-----
>From: fx.php_list-bounces at mail.iviking.org
>[mailto:fx.php_list-bounces at mail.iviking.org] On Behalf Of Jonathan 
>Schwartz
>Sent: Monday, December 13, 2010 1:07 PM
>To: FX.php Discussion List
>Subject: Re: [FX.php List] [off] SSL Certs
>
>I use RapidSSL also.  They are great.  It does take just a couple of 
>minutes...and that is the core of the question.  Are the 5 minute certs 
>viewed (by customers) as being as safe as the others that might take 2 
>weeks?
>
>Sort of like getting a college degree through mail order versus the the 
>regular way.
>
>The answer for both ssl certs and college degrees is the same. It 
>depends on who is looking at the certificate.
>
>J
>
>At 11:01 AM -0600 12/13/10, Bob Patin wrote:
>>
>>
>>Whether there is a qualitative difference between Thawte and RapidSSL 
>>is something I can't address; I will say, however, that getting a cert 
>>from Thawte used to be a huge pain, and took two weeks; getting one 
>>from RapidSSL takes about 5 minutes.
>>
>
>--
>Jonathan Schwartz
>Exit 445 Group
>jonathan at exit445.com
>http://www.exit445.com
>415-370-5011
>_______________________________________________
>FX.php_List mailing list
>FX.php_List at mail.iviking.org
>http://www.iviking.org/mailman/listinfo/fx.php_list
>_______________________________________________
>FX.php_List mailing list
>FX.php_List at mail.iviking.org
>http://www.iviking.org/mailman/listinfo/fx.php_list


--
Jonathan Schwartz
Exit 445 Group
jonathan at exit445.com
http://www.exit445.com
415-370-5011
_______________________________________________
FX.php_List mailing list
FX.php_List at mail.iviking.org
http://www.iviking.org/mailman/listinfo/fx.php_list