codema.in
Mon 10 Nov 2014 3:00PM

poddery.com domain and SSL renewal

MKT Manu Krishnan T V Public Seen by 72

Joe has transferred the domain to a godaddy account, which we created. The domain as well as the SSL certificate will expire by Dec 8, 2014.

Lets discuss which domain registrar we should chose and the SSL certificate.

S

shirish Wed 19 Nov 2014 6:49PM

umm... I looked at certificates in both Mozilla Firefox and Chromium. Gandi.net was not in both. We just need to see perhaps a site or two which uses Gandi SSL and see it works and also see if the certificate gets imported to the browser. If that works, we are practically home-free.

On the subject of price i leave to the rest of the gang.

PP

Pirate Praveen Wed 19 Nov 2014 7:08PM

You could try https://debian.org, all debian services use Gandi

PP

Pirate Praveen Wed 19 Nov 2014 7:11PM

We could move to https://letsencrypt.org/ when they arrive (summer 2015). We should configure DNSSEC and DANE in parallel. See the rationale by Jonne Haß https://poddery.com/posts/1461563

MKT

Manu Krishnan T V Thu 4 Dec 2014 3:18PM

Godaddy says domain can be moved to an account only after 60 days of one move. So we are struck there.

Also just came to know that SSL expires day after tomorrow. Will create startSSL certificate and use it for temporary purpose, till we move to Gandi.net

PP

Pirate Praveen Thu 4 Dec 2014 4:24PM

@manukrishnantv why do we have to go for startssl temporarily? Either stick to it for a year or move to gandi.net directly. What do you say? Also startssl allows only one free certificate per person I think. If that is the case someone who has not yet registered a certificate with them should do the registration.

MKT

Manu Krishnan T V Thu 4 Dec 2014 4:42PM

Gandi.net offers Free SSL only for domains with them, which we can obtain only after January end. Otherwise we need to purchase an SSL Certificate, which costs around USD 15.

startSSL offers multiple free SSL's. I already have 4 with them.

PP

Pirate Praveen Thu 4 Dec 2014 7:17PM

@manukrishnantv then why don't we just go with the startSSL option? When letsencrypt.org becomes active next year, we can switch to it.