Hacker News new | ask | show | jobs
by DASD 5070 days ago
Interesting. I went out to the balancedpayments site to see who they are. Absolutely no information. Am I not seeing a link somewhere on their page? The fact that they are using Godaddy as an SSL certificate provider/reseller and the certificate says run by "unknown" just makes me cringe.

Edit: Apparently there are some staff bios on the Community Page. Founded 2010. Is anyone familiar with other start-ups using them as well?

2 comments

They're a YC company (W11 iirc?), and yes, the Community Page is the best source of info at present:

https://www.balancedpayments.com/community

That page was put up in the past week or so, and the whole thing was rebranded from PoundPay a month or two ago--right about the time I started talking to them. Here's an etherpad where a lot of our initial conversation took place, with some additional background and info:

http://sync.in/gittip-balanced

Thanks for sharing the etherpad doc.
the certificate says run by "unknown" just makes me cringe.

It says that because it is not an EV SSL certificate. go to amazon if you want to see the same message, but from a verisign (non EV) cert.

Actually you dont need an EV certificate in order to show the name of the society inside the certificate, you need the EV cert only if you want to show the name in the browser bar. Just as an example (no affiliation with thawte):

this is a certificate that only validates the full domain name but has no info about the company: http://www.thawte.com/ssl/ssl123-ssl-certificates/index.html

this has also the company name inside the cert: http://www.thawte.com/ssl/web-server-ssl-certificates/index....

and this is the Extended Validation one: http://www.thawte.com/ssl/extended-validation-ssl-certificat...

Tipically the price of this certificate grows from one type to the other and also the required documents/paperwork changes (if you register a simple fqdn certificate many times the procedure is completely automated, if you register a certificate with the company inside, or an EV cert, you must send relevant documentation about your company)

Having said that, I would expect this kind of businesses to have at least a certificate with company details inside, or better an EV cert..

no, the site validation AND the second link do NOT include the company name in the SSL cert when you click on the cert details. You need an EV cert for that.

The site seal with a popup that includes the company details is not what me nor the op are referring to.

Thanks. I'm curious why more processors aren't using an EV certificate for all their pages such as what WEPAY appears to be doing.