On Mon, 17 Mar 2003 20:12:22 EST, Kee Hinckley said:
A .com cert goes for $99 semi-wholesale. QuickCerts are even
cheaper. That would be a per-year cost. Not too bad.
And how much do said certs prove? What verification does QuickCert do to
make sure that they're issuing a cert to an actually identified user?
At $100 a pop, what's stopping spammers and other miscreants from getting
bogus certs?
As for the encryption hit. A lot of sites are already using TLS and
self-signed certs. I use it for the hundreds of messages I
download/send every day, and other sites that support it use it
connecting to my server. Not a huge cost.
As I said, it's not a hit when you're doing several hundred pieces of mail
a day. You do several hundred thousand, you'll be wanting an SSL card.. ;)
(And yes, I have a listserv box that cranks about 500K msgs/day, and it will
do SSL with a self-signed cert if the other end says STARTTLS. Not many
sites do.)
pgpXc48hrCwzI.pgp
Description: PGP signature