Mailing List CGatePro@mail.stalker.com Message #102590
From: Paul Chauvet <chauvetp@newpaltz.edu>
Subject: Re: SSL and self signed certificates
Date: Wed, 26 Oct 2011 10:07:37 -0400 (EDT)
To: CommuniGate Pro Discussions <CGatePro@mail.stalker.com>
X-Mailer: Zimbra 7.1.2_GA_3268 (ZimbraWebClient - SAF3 (Linux)/7.1.2_GA_3268)



<snip>


I would suggest the following:

1.) If you are running a self-signed cert, do not use SSL to connect to
other hosts. Only use SSL for connections to clients.

2.) If you do not have sufficient budget to cover the costs of an SSL
certificate, then perhaps you should not be running your own server. Use
a service such as Google's hosted e-mail or something provided by your ISP.

My $0.02,

Tom


Another issue may be that you are getting your certificates from too expensive a source.  Certificate prices are not what they used to be and unless you have special requirements, you shouldn't be getting an EV certificate (or from an expensive source such as Verisign).


Paul Chauvet
State University of New York at New Paltz

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster