Trusted certificates

[Riven]

@princec

That’s only an SSL cert. Besides… what you you have to give to Comodo in order to get a cert? I had to provide actual proof of my company details and ownership to Thawte, countersigned by a solicitor.

Cas

I just put some random text in a webform and got my browser-accepted certificate a few hours later.

[princec]

I reckon you should blow the whistle on them, then. Try it with Verisign and Thawte though.

Cas

[pjt33]

@princec

I believe Thawte and Versign actually do make proper checks on the authenticity of the documentation provided. And so they should, because if it were found out that they didn’t, then they’d completely lose all credibility with consumers.

They have no credibility with me. cough MD5.

[Riven]

@pjt33

They have no credibility with me. cough MD5.

At least Comodo has RSA-2048

[kappa]

personally don’t care which authority has signed the certificate (probably nor do end users), as long as Java shows the trusted certificate dialog and not the untrusted certificate dialog.