Go Daddy to Issue SSL Certificates to Open Source Projects 'Free of Charge' [LWN.net]

The Go Daddy Group, Inc. has announced that it will issue its Turbo SSL Certificate to bona-fide open source software projects at no cost. "The Turbo SSL certificates which Go Daddy will issue to open source projects -- a $29.95 value -- are issued within minutes, have 99% browser recognition, and provide 128-bit Web server security -- the highest level of encryption available on the market today."

(Log in to post comments)

What does "listed" mean?

Posted Feb 18, 2005 21:45 UTC (Fri) by brouhaha (guest, #1698) [Link]

I'm not one to look a gift horse in the mouth, but I am puzzled by one thing. Their fine print says "Must be a listed, valid Open Source project to qualify." Where does it have to be listed?

I'm currently an OpenSRS (Tucows) reseller, and happy with them, but this is making me consider switching my paid certificate business to Go Daddy. I like supporting companies that support open source software, and even aside from that it would save me money.

What does "listed" mean?

Posted Feb 20, 2005 1:25 UTC (Sun) by dw (subscriber, #12017) [Link]

I daresay it may simply be a deterrent for stupid users who attempt to get something for free.

What does "listed" mean?

Posted Feb 23, 2005 0:03 UTC (Wed) by birwin (guest, #28042) [Link]

How long is the certificate issued for? After the issued time expires, are the open source projects able to renew for $0?

GoDaddy might be looking at converting open source projects for free now, but having them renew in 1 uear for a fee.

What does "listed" mean?

Posted Feb 23, 2005 0:11 UTC (Wed) by brouhaha (guest, #1698) [Link]

Even if they aren't offering free renewals, and even if the free certificate is only good for a year, it's still a good deal. But perhaps they will have free renewals.

What does "listed" mean?

Posted Feb 23, 2005 18:56 UTC (Wed) by birwin (guest, #28042) [Link]

I agree...

Go Daddy to Issue SSL Certificates to Open Source Projects 'Free of Charge'

Posted Feb 21, 2005 0:01 UTC (Mon) by British (guest, #19768) [Link]

I would think it would be in sourceforge or objectweb etc

Lee

Go Daddy to Issue SSL Certificates to Open Source Projects 'Free of Charge'

Posted Feb 21, 2005 13:51 UTC (Mon) by dan_b (subscriber, #22105) [Link]

If the certificate is "issued within minutes", exactly what kind of authenticity checks are they doing first?

Go Daddy to Issue SSL Certificates to Open Source Projects 'Free of Charge'

Posted Feb 21, 2005 14:27 UTC (Mon) by chohman (guest, #5519) [Link]

Hmmm.
A few years ago, I was sharing an office with a company that needed to get a Verisign certificate.
How did Verisign authenticate you? Send them your Dunn and Bradstreet number.
How did Dunn and Bradstreet authenticate you? Fax them a copy of your letterhead with a request for a number on it.
Perhaps they do a better job now, but that incident certainly changed my opinion of Verisign certificates. When I bought a copy of Kermit from Columbia University, they issued their own certificate instead of using a Verisign one, and I must say I understood why that was reasonable.

Go Daddy to Issue SSL Certificates to Open Source Projects 'Free of Charge'

Posted Feb 23, 2005 0:14 UTC (Wed) by birwin (guest, #28042) [Link]

Some CAs check for a valid company and others check valid domain ownership. The valid domain ownership is much faster, but less trustworthy, although I would hardly call letterhead verification trustworthy! I assume GoDaddy is reselling some other root, but I do not know which one. Go to www.sslassistant.com for a comparison of CAs and a description of which CAs validate via domain and which validate via company.