[rmoriz]

Nice find! But given the amount of hassle to get one, your hourly rate must be very low. But I'm sure it will be the future to get near-0$ DV-certificates.

It's a pity no CA besides StartCom and Comodo pick up the S/MIME market. Both options are not very usable for non-IT people.

[iancarroll]

> It's a pity no CA besides StartCom and Comodo pick up the S/MIME market.

A lot of CAs sell S/MIME certs, including GlobalSign and CyberTrust. They're not heavily advertised, though.

[thejosh]

Cloudflare offer free SSL now, so if you are small and can't afford a certificate, they could be a good choice.

[grakic]

Cloudflare Univeral SSL uses SNI https://support.cloudflare.com/hc/en-us/articles/203041594-W...

[thejosh]

Sure, but looking at: Current inclusion status in major CA certificate stores: Included by default in NSS 3.16.3 or newer (Mozilla Firefox 32+). Included by default in Microsoft Windows since September 2014 on Windows Vista+ (should automatically update as mentioned here). Included by default in Android 5.0+ (no source, but on my Nexus tablet with Android 4.4.4 it is not yet included but on my Nexus phone with Android 5.0 it is) It is not yet included in the Apple certificate store. This is not a big issue however, since the WoSign root CA is cross-signed by the StartCom CA which itself is included almost everywhere since >5 years.

SNI isn't included in Windows XP, yet the SSL won't work in XP anyway.

[rmoriz]

S/MIME != SSL http://en.wikipedia.org/wiki/S/MIME

[Nostromov]

Yes, that would be @ https://en.wikipedia.org/wiki/S/MIME (ffs, lol; we're talkin' about SSL :))

[rmoriz]

No we were talking about X509 certificates