17 Dec
2003
17 Dec
'03
11:17 p.m.
Are there any free Certificate Authorities for SSL? I've got a Stronghold server running, and I don't particularly want to pay Verisign/Thawte's high prices, but I do want to be able to do real SSL. I've set up my own CA, and given myself my own cert., but having the same server you're interacting with being the one that's the CA for the transaction leaves the setup open to man-in-the-middle attacks (I'd think, at least...). So, who do I turn to for a cert.? I don't need amazingly trusted or trustworthy security -- maybe just some third party whose site is unlikely to have been compromised, etc... Please respond by email: I've moved to coderpunks, and so won't see replies on cypherpunks. thanks, -sq