The Clan Lord Sentinel

I went to login to my account on the clanlord portal and got a warning that there was something up with the certificate. Sure enough, a new certificate was issues on 7/19/2010 and is self signed. Needless to say I didn't sign in.

Sanitized details from Certificate issuer field:
E = dmchenry@<removed>.com
CN = deltatao.com
OU = Main
O = Deltatao
L = Citrus Heights
ST = CA
C = US

When will the site be up with a valid certificate?

What's wrong with that certificate?

Jeanne wrote:What's wrong with that certificate?

It's self signed. and thus, not to be trusted. Certs aren't that expensive. I think someone posted a link to cheap and valid certs. Could someone with that info chime in and maybe send Eldon a message?

Better now?

Joedelta wrote:Better now?

Looks like you got a non-wildcard cert -- it matches to deltatao.com but not www.deltatao.com. You should add a redirect to remove the www when using SSL.

Joedelta wrote:Better now?

Joe posted! He reads!

noivad wrote:

Jeanne wrote:What's wrong with that certificate?

It's self signed. and thus, not to be trusted. Certs aren't that expensive. I think someone posted a link to cheap and valid certs. Could someone with that info chime in and maybe send Eldon a message?

Do people really feel this way about all SSL certs?

I've only ever bowed to, what I see as the extortion of the CA's, when adding a cert to my company's secure web server. I still use self-signed certs for my ssl ftp server and my ssl vpn device(s).

I'm honestly curious what peoples views are on this...the only place I can see it as useful is for http(s) traffic.

Aldernon wrote:

noivad wrote:

Jeanne wrote:What's wrong with that certificate?

It's self signed. and thus, not to be trusted. Certs aren't that expensive. I think someone posted a link to cheap and valid certs. Could someone with that info chime in and maybe send Eldon a message?

Do people really feel this way about all SSL certs?

I've only ever bowed to, what I see as the extortion of the CA's, when adding a cert to my company's secure web server. I still use self-signed certs for my ssl ftp server and my ssl vpn device(s).

I'm honestly curious what peoples views are on this...the only place I can see it as useful is for http(s) traffic.

Well a self signed certificate isn't worth the bits it is imprinted in. As long as people know you self signed for an FTP or other non-web site, and that there's a chance this info could be faked, then go ahead.

20 bucks says a GM linked him the thread and that he doesn't read the Sentinel otherwise.

I wouldn't provide any billing info to a site with a self-signed certificate.

Particularly after that whole 'hello worldy' thing that happened to deltatao.com 5/6 months ago, whatever that was.