How to buy a root CA certificate?
Interested in how much money is necessary to buy CA cert chaining up to a trusted root and besides money is something else necessary. globalsign advertise this: https://www.globalsign.com/en/certificate-authority-root-signing/ ===== GlobalSign’s Trusted Root Signing service allows suitably qualified organizations to capitalize on their investments in PKI or CA software to issue digital certificates which chain up to GlobalSign’s publicly trusted Root Certificate. =====
On Thu, Oct 8, 2015 at 3:12 AM, Georgi Guninski <guninski@guninski.com> wrote:
Interested in how much money is necessary to buy CA cert chaining up to a trusted root and besides money is something else necessary.
Laughably or alternatively, becoming a root isn't hard... copy and mogrify another root's policy/practice/security docs. Apply to Mozilla, Apple, MS, Oracle. And you're a root. This may actually be easier than convincing some root to tap you as an intermediate CA. Beware politics of power.
On 08/10/15 08:24, grarpamp wrote:
On Thu, Oct 8, 2015 at 3:12 AM, Georgi Guninski <guninski@guninski.com> wrote:
Interested in how much money is necessary to buy CA cert chaining up to a trusted root and besides money is something else necessary.
Laughably or alternatively, becoming a root isn't hard... copy and mogrify another root's policy/practice/security docs. Apply to Mozilla, Apple, MS, Oracle. And you're a root. This may actually be easier than convincing some root to tap you as an intermediate CA. Beware politics of power.
Talk to https://letsencrypt.org - see what they had to do (or if they are willing to have you chain to them) :) As it's non-commercial they may just be happy to chat tech with you for a while. I have no contacts there but I think it's part of or linked to EFF.
participants (3)
-
Georgi Guninski -
grarpamp -
oshwm