poddery.com domain and SSL renewal
Manu Krishnan T V PublicSeen by 114Joe has transferred the domain to a godaddy account, which we created. The domain as well as the SSL certificate will expire by Dec 8, 2014.
Lets discuss which domain registrar we should chose and the SSL certificate.
For SSL, last time we purchased AlphaSSL from IPXCore, but they have stopped providing SSL. There are many re-sellers like https://www.gogetssl.com and https://www.ssls.com.
We need to finalize which type of SSL to use and look for competing pricing.
I suggest moving to gandi.net as it's EU-based and definitely more reliable than GoDaddy. Gandi also issues SSL certificates, and the first year Standard SSL is free with all domains registered with them.
Seriously, I am completely noob in these matters. @manukrishnantv , you and @anisha are the web related techies. You guys decide.
@balasankarchelamat , its a good time for you to learn :) how long we can depend only on @manukrishnantv and @anisha ? Anish is already refusing to even send a mail to Joe S for payment, which he even agreed to do before.
Gandi.net is a good option for domains. I haven't thought about them. Thanks @vamsee for reminding.
The cost is comparatively high by around $5. ($15.5 for an year).
Regarding SSL's, we can get first year for free, but its issued by Gandi themselves, and not sure about the acceptance. Lets give it a try and if it doesn't work, we can select another. But it should be done before the expiry of present one.
Creating a proposal, so that we can decide upon the transfer.
Move domain and SSL Certificate to Gandi.net
proposal by Manu Krishnan T V Closed Thu 20 Nov 2014 6:34PM
Move domain to Gandi.net and use their free SSL Certificate. If any issues, look for other solutions. Also configure DNSSEC and DANE records.
Presently, poddery.com is with Godaddy and SSL certificate in use is AlphaSSL by GlobalSign.
Lets move both of them to Gandi.net. They offer 1st year free SSL certificate. The cost will be around US $ 15 for an year.
Results
| Results | Option | Votes | % of votes cast | % of eligible voters | |
|---|---|---|---|---|---|
| Agree | 3 | 100 | 7 |  | |
| Abstain | 0 | 0 | 0 | ||
| Disagree | 0 | 0 | 0 | ||
| Block | 0 | 0 | 0 | ||
| Not voted | 38 | 93 |              |
Haven't used Gandi.net yet, but have heard them as a good domain registrar.
Need to tryout the SSL. If it suits our needs that will be great.
yes, I would assume it will work. Why would someone be in the business of selling ssl certificates that doesn't work?
CAcert is an exception.
@manukrishnantv Gandi is an SSL Certification Authority by itself, and it's one of EU's largest domain registrars. I've used their certs before, and no problems at all. Just allow for a day for the certificate to be verified/issued.
umm... I looked at certificates in both Mozilla Firefox and Chromium. Gandi.net was not in both. We just need to see perhaps a site or two which uses Gandi SSL and see it works and also see if the certificate gets imported to the browser. If that works, we are practically home-free.
On the subject of price i leave to the rest of the gang.
You could try https://debian.org, all debian services use Gandi
We could move to https://letsencrypt.org/ when they arrive (summer 2015). We should configure DNSSEC and DANE in parallel. See the rationale by Jonne Haß https://poddery.com/posts/1461563
Godaddy says domain can be moved to an account only after 60 days of one move. So we are struck there.
Also just came to know that SSL expires day after tomorrow. Will create startSSL certificate and use it for temporary purpose, till we move to Gandi.net
@manukrishnantv why do we have to go for startssl temporarily? Either stick to it for a year or move to gandi.net directly. What do you say? Also startssl allows only one free certificate per person I think. If that is the case someone who has not yet registered a certificate with them should do the registration.
Gandi.net offers Free SSL only for domains with them, which we can obtain only after January end. Otherwise we need to purchase an SSL Certificate, which costs around USD 15.
startSSL offers multiple free SSL's. I already have 4 with them.
@manukrishnantv then why don't we just go with the startSSL option? When letsencrypt.org becomes active next year, we can switch to it.
There are lots of registrars, some like godaddy are known to be not much respecting privacy. Most of my domains are with resellerclub, which is part of EIG group (enduranceinternational.com). There are few domains with enom and UK2 group, but ResellerClub will be my first preference.
@praveenarimbrathod @anisha @balasankarchelamat @joeb @mintojoseph