Comment 38 for bug 600779

Revision history for this message
In , Bpkroth (bpkroth) wrote :

Really your choice should not be about which browser to use for your applications, but rather which certificates to use. ipsCA has shown that the trust you should place in them isn't much better than self signed certs. I mean they continued to issue certs after their CA was expired. If that's all the more trust you need for your applications then I wouldn't bother to worry about the annoyance you're giving your users. Might as well set up your own CA, distribute the cert to your lab machines, and deal with it that way.

If you need something more, then you should go out and get some real certs. digicert [1] has wildcard certs for ~$500. That's quite reasonable, they're well trusted, work in just about every client app I've tried (minus eudora :P), and can be managed fairly easily since typically one will work for a number of services.

I for one am much happier in the mozilla folks taking their time to diligently check the purported security that a particular CA offers before my browser magically trusts them.

[1] http://www.digicert.com/wildcard-ssl-certificates.htm