Top all-time · #1739
certsimple.com
Company blog · certsimple.com/blogsecurityweb
certsimple.com is the company blog at certsimple.com, writing about security and web. Since 2015, 42 different Hacker News readers have linked it 186 times, most often “Control the SSL CAs your browser trusts”. No feed was found, so read it on the site itself.
Too few sampled comments (22) to say how often HN recommends it.?
Why HN links it
HN readers link CertSimple's blog for posts on SSL/TLS certificates, including domain-validated versus extended-validation certificates, browser CA trust and distrust, and HTTPS performance such as Brotli on nginx.
Summarised by Claude from a sample of 22 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- /4 people · 19 mentions · first linked 2015-04-09
- Control the SSL CAs your browser trusts4 people · 7 mentions · first linked 2015-10-16
- ‘You can't use Brotli for dynamic content’ and other misconceptions4 people · 5 mentions · first linked 2017-04-05
- What RSA key size to use for an SSL certificate4 people · 4 mentions · first linked 2015-04-23
- Never see localhost SSL warnings again3 people · 9 mentions · first linked 2015-09-08
- Why you're always at least three steps down your HTTPS certificate chain3 people · 4 mentions · first linked 2016-05-04
- Are EV certificates worth it? A technical guide to SSL validation3 people · 4 mentions · first linked 2015-07-03
- /3 people · 3 mentions · first linked 2015-08-06
- 'Single domain' and 'multi domain' HTTPS certificates are the same thing3 people · 3 mentions · first linked 2017-01-06
- The Command Line Rosetta Stone – a comparison chart for modern operating systems2 people · 12 mentions · first linked 2015-04-30
What Hacker News says?
> EV certs can't be automated No entirely, but mostly: seeing as this is my job, I should have some idea. Currently writing a post about how we've used some psych techniques to automate the non-automatable parts which I'll post on HN. > (and they're a dumb idea anyway) EV matches identity to public keys. Nothing more, nothing less. If you need EV, we ( https://certsimple.com ) specialise in making those background c…
Comment linking /about
on “Defending Our Brand”Submitted What web developers should know about SSL as a story · 222 points
HN discussionHi Jonah, I run https://certsimple.com . We only do EV certificates, and we do it much faster than any of the existing companies, which normally quote 7-10 days to complete the validation process. I waited around a month for GoDaddy earlier this year, which is how I ended up making CertSimple. CertSimple do EV certificates in an average of 5 hours. - We check the customers info against the required government inform…
Comment linking /
on “Let's Encrypt is Trusted”Submitted SSL tools we wish we'd known about earlier as a story · 217 points
HN discussionYou don't shop at Amazon.com? Because they don't believe in the EV scam either! More on the DV vs EV topic here: https://certsimple.com/blog/are-ev-ssl-certificates-worth-it
Comment linking /blog/are-ev-ssl-certificates-worth-it
on “Our First Certificate Is Now Live”Submitted HTTPS provides more than just privacy as a story · 211 points
HN discussion> But a Padlock in my browser is something I trust. On the padlock note, Microsoft Edge shows a hollowed out, grey padlock for DV certificates. Only EV certs get a full green one (as well as the legal name as other browsers show for EV). See https://certsimple.com/blog/dv-ssl-in-microsoft-edge
Comment linking /blog/dv-ssl-in-microsoft-edge
on “Our First Certificate Is Now Live”Submitted Domain-validated SSL will soon be free from the large CAs as a story · 203 points
HN discussionI run https://certsimple.com : we only do EV certificates, we're the fastest place to get an EV cert, we check as much as we can before you pay us a cent, and our application process is 80 seconds.
Comment linking /
on “Our First Certificate Is Now Live”Submitted Chrome is warning users about insecure pages as a story · 185 points
HN discussionA business, a fulfilling job and some really happy customers! At the beginning of 2015 I was waiting three weeks for GoDaddy to verify my company for an EV HTTPS cert. I spent 6 weeks coding a very minimal version of https://certsimple.com - it launched on the front page of HN on March 16th https://news.ycombinator.com/item?id=9210908 , got it's first customers on that same day and has become my fulltime career for…
Comment linking /
on “Ask HN: What has HN given you?”Submitted Why your 'A' grade SSL is 'outdated cryptography' on Chrome as a story · 139 points
HN discussionEV is mandatory for .onion HTTPS certificates - since onion hashes (the 'domain name') are even less meaningful as a form of identity than regular domains. There's a couple of other differences with .onion certs too: https://certsimple.com/help/tor-support
Comment linking /help/tor-support
on “The New York Times Is Now Available as a Tor Onion Service”Submitted ‘You can't use Brotli for dynamic content’ and other misconceptions as a story · 136 points
HN discussionThanks! We're actually about the middle of the road price wise, our main thing is tech: the EV process can be pretty painful, our role is to speed it it up and make it easier. We start checking against government directories in 63 countries prior to payment, use webcrypto in supported browsers to quickly generate CSRs, make instant-paste openssl / windows scripts to make an ECC or RSA keypair quickly if you prefer t…
Comment linking /about
on “Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates”Submitted How to deploy your node app on Linux, 2016 edition as a story · 134 points
HN discussionEV certificates have the same level of confidentiality and integrity as DV certs, but they have different authentication - specifically, they tie the certificate to a legal entity rather than a domain name. ie. https://paypal.com-customerservice.ru vs PayPal Inc [US] | https://paypal.com I run https://certsimple.com . We sell EV certs. But you can verify the above pretty easily by checking out the EV guidelines, the…
Comment linking /
on “Intent to Deprecate and Remove: Trust in Existing Symantec-Issued Certificates”Submitted Getting an A+ on the SSL Labs test in Node.js and Io.js as a story · 73 points
HN discussionWe also use webcrypto on https://certsimple.com If people prefer, we also dynamically generate a full OpenSSL or powershell command,so they can make keypairs on their own server with a single paste - no terminal Q and A. We're awesome, but there's nothing stopping you from using the tools wherever you want. :^)
Comment linking /
on “Get HTTPS for free”Submitted How Symantec upsells Internet Explorer 5 SSL support in 2015 as a story · 59 points
HN discussionBrowsers are solving this by making localhost trusted over http (so webcam, notifications, and other privileged features work work), but here's a more specific guide to getting localhost https working on MacOS - using Keychain and a single command to export the created cert into PEM for your local webserver: https://certsimple.com/blog/localhost-ssl-fix
Comment linking /blog/localhost-ssl-fix
on “Certificates for localhost”Submitted Chrome's 'Secure' indicator was designed to make users proceed on any HTTPS site as a story · 51 points
HN discussionhttps://certsimple.com - faster, easier verification for websites, so they can prove they're run by a specific company (with an EV SSL cert). It's essentially a UI and a bunch of APIs that connect to different data sources to pre-check info, then pass that on to a CA.
Comment linking /
on “Ask HN: What is an example of a super simple SaaS that is profitable?”Submitted Why we don't sell domain validated SSL certificates as a story · 42 points
HN discussionYep, what @detaro said. Here's the specifics: https://certsimple.com/blog/wildcard-ev-certificate
Comment linking /blog/wildcard-ev-certificate
on “Chrome's Plan to Distrust Symantec Certificates”Submitted Show HN: Fast and simple way to get EV SSL certificates as a story · 40 points
HN discussionhttps://certsimple.com It’s incredibly fast, the guy who runs it is nice, great customer service. It just does what you need.
Comment linking /
on “Chrome's Plan to Distrust Symantec Certificates”Submitted Your OpenSSL CSR command is out of date as a story · 39 points
HN discussion> How much faster? https://certsimple.com/about > The verification was basically just a phone call asking "Are you X? Ok great! Here's your cert!" Congratulations, you have an active registered company that was already well known to qualified third parties. Before that phone call happens, the CA has to verify your existence and status by government records and a qualified third party. There are additional steps for…
Comment linking /about
on “Let's Encrypt root certificate trusted by Mozilla”Submitted What RSA key size to use for an SSL certificate as a story · 35 points
HN discussion
