by psauro » Yesterday, 3:52 am
I am very sorry to say that Actalis (the last of the gratis email S/MIME-certificate providers!) should not even be in the list, as it generates the key pair itself! That includes the private key! A lousy example of "what not to do" security-wise.
mozillaZine's article should, at the very least, put a notice warning novice users of the highly improper behavior of Actalis. Otherwise, it is as if it, somehow, endorses the situation.
lordpixel wrote:Hi, I wanted to update
http://kb.mozillazine.org/Getting_an_SMIME_certificate to note that all but 1 of the providers listed on that page is now only offering 30 day free trials for SMIME certs.
I see the knowledge base thread is currently locked so I thought I would try here.
If you want to make the update for me then the only one still giving out 1 year certs is Actalis.
I am very sorry to say that Actalis (the last of the gratis email S/MIME-certificate providers!) should not even be in the list, as it generates the key pair itself! That includes the private key! A lousy example of "what not to do" security-wise.
mozillaZine's article should, at the very least, put a notice warning novice users of the highly improper behavior of Actalis. Otherwise, it is as if it, somehow, endorses the situation.
[quote="lordpixel"]Hi, I wanted to update http://kb.mozillazine.org/Getting_an_SMIME_certificate to note that all but 1 of the providers listed on that page is now only offering 30 day free trials for SMIME certs.
I see the knowledge base thread is currently locked so I thought I would try here.
If you want to make the update for me then the only one still giving out 1 year certs is Actalis.[/quote]
