On 15.06.2016 15:57, ????????? ???????? wrote:> Nowadays it's quite easy to get normal ssl certificates for free. E.g. > > http://www.startssl.com > http://buy.wosign.com/freethat is right, but hink of your potential clients, because wosign has a problem - slow OCSP, ... because their server infrastucture is located in China, and not the best bandwidth ... when validity checks of the used SSL certificate very probable fail, it is worse than not using SSL ... Walter
> that is right, but hink of your potential clients, because > wosign has a problem - slow OCSP, ... > because their server infrastucture is located in China, and not the > best bandwidth ... > > when validity checks of the used SSL certificate very probable fail, > it is worse than not using SSL ...I don't think OCSP is critical for free certificates suitable for small businesses and personal sites.
On 16.06.2016 21:42, ????????? ???????? wrote:>> that is right, but hink of your potential clients, because >> wosign has a problem - slow OCSP, ... >> because their server infrastucture is located in China, and not the >> best bandwidth ... >> >> when validity checks of the used SSL certificate very probable fail, >> it is worse than not using SSL ... > > I don't think OCSP is critical for free certificates suitable for > small businesses and personal sites. >this is philosophy; I'd say when you do it then do it good, else don't do it;