Discussion Locked

SSL - Which vendor?

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Verisign, obvious choice? Don't know, what about Entrust? Much less expensive for what appears to be the same service/product for a web server.

Anyone an expert that explain the reason for the cost differences, or if there is a reason? Thanks.

6 replies

by joseph moore

I am not an expert, but I have been buying SSL certs since 1999, so I know a thing or two.

Yes, Verisign's prices have gone up over the years (remember $250 per year, versus the current $850???). The main reason to buy Verisign is the name "Verisign" as the root of your cert. That is all.

You are buying the name. Now sure, you get their cert verification "Secure Seal" icon you can put on your page. Big deal!

But again, it is VERISIGN'S Secure Seal, not BOB's Secure Seal.

A 128-bit cert is the same, whether it be from Verisign, Entrust, or one you issued yourself from your own in-house cert authority server. From a technical standpoint, the certs are the same.

But if you issue one yourself, you will get cert warnings (non-trusted root) until you import the root cert into the IE trusted root CA container. But explaining that to users is a pain. They would rather see Verisign as the cert signer.
Everyone knows Verisign. And they feel safer with them....

And that is why Verisign is so expensive!

by joseph moore

So, no, a Verisign cert is no better than Entrust or anyone else (as long as the bit count is the same!!!). But you might run into difficulities in trying to get a cert from someone other than Verisign. That is wholly dependant upon the corporate culture you are in.

For myself, my company wants Versign, so we get Verisign.

hope this helps

This discussion is closed to new replies.