Godaddy

[NewsArchive]

I just noticed that godaddy is selling code signing certificates. $199 per
year if bought a year at a time. 169 per year for 3 yr certs. Not much of a
deal compared to comodo if I remember correctly.
--

Mark Riffey
http://www.rescuemarketing.com/blog/
Guy Kawasaki & the Wall Street
Journal staff read it, maybe you should too.

[NewsArchive]

Hey, CACERT is giving the stuff away free although their product requires
extra work but the results are not recognized.

AFAIK the only ones that are worth anything are Verisign, Comodo and Thawte;
Comodo have the best deal, especially via LinderSoft.

Quite obviously Friedrich has done his homework. (What else is new?)

Sim Sherer
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~

[NewsArchive]

> I just noticed that godaddy is selling code signing certificates. $199 per
> year if bought a year at a time. 169 per year for 3 yr certs. Not much of a
> deal compared to comodo if I remember correctly.

Mark,

Friedrich just posted this recently in another message thread so current
SetupBuilder license holders or those with Lindersoft Community Membership
get an amazing break on pricing WHEN they start the buying process through
the Lindersoft ordering page:

http://www.lindersoft.com/order_codesigning.htm

(although, of course, actually buying from Comodo)!

David

--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
Profile Exchanges - www.encouragersoftware.com/profile/
http://www.profileexchanges.com/blog/

[NewsArchive]

> I just noticed that godaddy is selling code signing certificates. $199 per
> year if bought a year at a time. 169 per year for 3 yr certs. Not much of
> a deal compared to comodo if I remember correctly.

I think SetupBuilder users have access to one of the best offers in the
code-signing market.

- Verisign Code Signing Certificates cost $499 for 1 year, $895 for 2 years
and $1,295 for 3 years.

- Thawte Code Signing Certificates cost $299 for 1 year and $549 for 2
years.

- GoDaddy Code Signing Certificates cost $199.99 for one year, $359.98 for 2
years and $509.97 for 3 years.

- Comodo Code Signing Certificates cost $179 for 1 year, $340 for 2 years
and $500 for 3 years.

The same original Comodo Certificates for Lindersoft SetupBuilder customers
cost only $79 for 1 year, $143 for 2 years and $200 for 3 years.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder "point. click. ship"
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

> I think SetupBuilder users have access to one of the best offers in the
> code-signing market.

Agreed, thats why I posted the godaddy info:)
--

Mark Riffey
http://www.rescuemarketing.com/blog/
Guy Kawasaki & the Wall Street
Journal staff read it, maybe you should too.

[NewsArchive]

>> I think SetupBuilder users have access to one of the best offers in the
>> code-signing market.
>
> Agreed, thats why I posted the godaddy info:)

;-)

Friedrich

[NewsArchive]

>- Comodo Code Signing Certificates cost $179 for 1 year, $340 for 2 years
>and $500 for 3 years.
>
>The same original Comodo Certificates for Lindersoft SetupBuilder customers
>cost only $79 for 1 year, $143 for 2 years and $200 for 3 years.

ASP members can get Comodo Code Signing Certificates for $75 a year.

https://secure.ksoftware.net/asp_code_signing.html

Steve

--
Neural Planner Software Ltd http://www.NPSL1.com
JustNN. Just Neural Networks. http://www.justnn.com
EasyNN-plus. Neural Networks plus. http://www.easynn.com
SwingNN. Forecast with Neural Network. http://www.swingnn.com

[NewsArchive]

>>- Comodo Code Signing Certificates cost $179 for 1 year, $340 for 2 years
>>and $500 for 3 years.
>>
>>The same original Comodo Certificates for Lindersoft SetupBuilder
>>customers
>>cost only $79 for 1 year, $143 for 2 years and $200 for 3 years.
>
> ASP members can get Comodo Code Signing Certificates for $75 a year.
>

Yes, but 2-years cost $150 and 3-years cost $225 (for ASP members). So the
winner is: the SetupBuilder user with the SetupBuilder discount <g>

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder "point. click. ship"
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

Not to mention the slight winning advantage of actually getting to use
SetupBuilder <g>

Jane Fleming

[NewsArchive]

> Not to mention the slight winning advantage of actually getting to use
> SetupBuilder <g>

<G> :)

Friedrich

[NewsArchive]

>Not to mention the slight winning advantage of actually getting to use
>SetupBuilder <g>
>

Yes but some of us ASP members also use SB.

Stephen Wolstenholme

[NewsArchive]

That makes Comodo VERY appealing, but Henry's post about the flaming hoops
you have to go through (including opening yourself up to spammers) is very
disturbing.

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

>>>- Comodo Code Signing Certificates cost $179 for 1 year, $340 for 2 years
>>>and $500 for 3 years.
>>>
>>>The same original Comodo Certificates for Lindersoft SetupBuilder
>>>customers
>>>cost only $79 for 1 year, $143 for 2 years and $200 for 3 years.
>>
>> ASP members can get Comodo Code Signing Certificates for $75 a year.
>>
>
>Yes, but 2-years cost $150 and 3-years cost $225 (for ASP members). So the
>winner is: the SetupBuilder user with the SetupBuilder discount <g>

Yes, but I was thinking about ASP members who do not have a current SB
maintenance and support subscription plan.

It's a pity we can't combine all the Comodo discounts :)

Steve

--
Neural Planner Software Ltd http://www.NPSL1.com
JustNN. Just Neural Networks. http://www.justnn.com
EasyNN-plus. Neural Networks plus. http://www.easynn.com
SwingNN. Forecast with Neural Network. http://www.swingnn.com

[NewsArchive]

Is it easier to order and get than Comodo? If so, then it would be a good
deal for me.

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

Hi Russ,

> Is it easier to order and get than Comodo? If so, then it would be a good
> deal for me.

Doubt it.

Best regards,

--
Arnór Baldvinsson - Icetips Creative, Inc.
Port Angeles, Washington
www.icetips.com - www.buildautomator.com

Icetips product subscriptions at http://www.icetips.com/subscribe.php

[NewsArchive]

> Is it easier to order and get than Comodo? If so, then it would be a
> good deal for me.

All WebTrust companies have to follow the same strict rules when doing
identity verification. So I doubt it.

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder "point. click. ship"
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

OK. So the tie breaker goes to price. Back to Comodo. And that is almost
nothing as far as cost is concerned.

Henry's post on how to acquire the cert is disturbing if that is accurate.
I'm not really up to instructing my domain provider and say "cancel my
private WHOIS and let the spammers back in". And why is the order form
different on XP than Vista? Did they fix that issue yet? And I don't have
a fax, do they have an email address to send the PDFs to?

If its this much trouble to get a cert, you can bet I will only order the 3
year deal. I'm certainly not going through this every year!

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

> And why is the order form different on XP than Vista? Did they fix
> that issue yet?

This is not a Comodo issue. Comodo (or VeriSign, etc.) cannot do anything
to "fix" this :-(

--
Friedrich Linder
Lindersoft
www.lindersoft.com
+1.954.252.3910

SetupBuilder "point. click. ship"
Create Windows Vista ready installations in minutes

-- Official Comodo Code Signing and SSL Certificate Partner

[NewsArchive]

It seems like a typical web entry form. What am I missing?

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

>
> It seems like a typical web entry form. What am I missing?
>

It's not the web entry form per-se. It's caused by the Microsoft
Authenticode technology behind the scenes (the generation of the private key
file, etc.). For example, the PVK file option is simply not available if
you are using Windows Vista or Windows 2008 Server. This is a killer
problem. I would never store the certificate in the machine's CSP. In
fact, it is possible to request a certificate from a Vista machine, but the
success of the venture depends on quite a few factors.

And it's not only the operation system that can cause problems. The browser
can also be a nightmare:

http://www.lindersoft.com/forums/showthread.php?t=9498

Friedrich

[NewsArchive]

I renewed mine a couple of months ago, Russ... was thinking of doing a brief
piece for Dave Harms but it hasn't happened yet.

I made no changes to my whois, but it's not private. I did create and use a
different email than the one I used when I bought my first certificate
directly from Comodo.

The order form absolutely would not work from Vista/IE7 for me (missing some
fields... such as where you say you want the certificate as a file). I used
XP/IE7 to order. You WILL NEED to collect your certificate once it's
approved using THE SAME XP MACHINE (and, of course, my XP VM chose that
period to crash and corrupt... <argh!>).

My 11/14 response on Kurt's thread here lists the required documentation.
Note that the first confirming email I got from Comodo confirming my
purchase asked for different documentation and offered the option of an
email address. That failed, I opened a support ticket, and the subsequent
email had the document list I pasted in the Kurt response. You can email
the documentation through the support ticket process.

Yes, it's more of a PITA than the first time, and only somebody who
regularly pays dominatrixes would buy anything less than a 3-year cert <G>

Jane

[NewsArchive]

Jane,

I've printed out your articles on this. Thank you for writing them, it
certainly help clear the fog for me.

But I decided to gather all the information I can *before* I even start the
process. I went through a lot of issues just getting everything to work on
GoDaddy the first time (meaning the processors, bank accounts set up, SSL
certs, etc). Because of that, I'm very reluctant to make even the slightest
change to my server or account settings, knowing it will have a ripple
effect. I may be over reacting, but I'm not going through that again <G>.

Also, you now raised another issue. I need code signing to work on my Vista
machine, not my XP machine, yet I can only get the proper cert if I use my
XP machine? And the cert is only good on the machine that ordered it? I
hope that is not true.

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

Comodo gives you an option to store the certificate in the machine's CSP
(cryptographic service provider store) - BAD IDEA - or in a file (which is
what you want). (You say you printed the clarionmag articles I wrote on
code-signing. Look at the options in Figure 9.)

You need to download the certificate from Comodo onto the machine you used
to request it.
Once you've got the certificate (certificate file and private key file) in
your hot little hands, you can stick them on any machine you want and/or
create a PFX file and use it where you want (assuming you've copied
signtool.exe).
I used 32-bit XP in a VMWare virtual machine on my laptop to purchase and
download the certificate. Having done that, I can do code-signing running
in the 64-bit Vista host with no problems.


Jane

[NewsArchive]

Thanks. That's a worry off the list then. This is just one of those areas
where a guide sitting next to your elbow walking you through each step would
be nice. I hated curry and sushi until I had someone show me the proper way
to fix and eat it <g>

>
> You need to download the certificate from Comodo onto the machine you used
> to request it.
> Once you've got the certificate (certificate file and private key file) in
> your hot little hands, you can stick them on any machine you want and/or
> create a PFX file and use it where you want (assuming you've copied
> signtool.exe).

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

Russ,

> sushi until I had someone show me the proper way to fix and eat it

Fried is best.

--
Lee White

http://CWaddons.com

[NewsArchive]

Nah...
Sambar with iddlies <yum!>

Jane Fleming

[NewsArchive]

> Comodo gives you an option to store the certificate in the machine's CSP
> (cryptographic service provider store) - BAD IDEA - or in a file (which is
> what you want). (You say you printed the clarionmag articles I wrote on
> code-signing. Look at the options in Figure 9.)
>
> You need to download the certificate from Comodo onto the machine you used
> to request it.
> Once you've got the certificate (certificate file and private key file) in
> your hot little hands, you can stick them on any machine you want and/or
> create a PFX file and use it where you want (assuming you've copied
> signtool.exe).

Russ,

For your info and others - in addition to Jane's excellent advice and CMag
articles -

Once you've got the certificate (certificate file and private key file), if
you want to create PAD (product descriptions and specifications to online
sources in XML format) files with digital signatures, you will need to
create the PFX file - here's an excellent source to get you started.

Association of Shareware Professionals PAD - PAD Digital Signature
http://www.asp-shareware.org/pad/spec/padsign.php

David

--
From David Troxell - Product Scope 7 - Encourager Software
Clarion Third Party Profile Exchange Online
http://encouragersoftware.com/profile/clarlinks.html
Profile Exchanges - www.encouragersoftware.com/profile/
http://www.profileexchanges.com/blog/

[NewsArchive]

> I used
> XP/IE7 to order.

Can you order in a VMware VM? :)
--

Mark Riffey
http://www.rescuemarketing.com/blog/
Guy Kawasaki & the Wall Street
Journal staff read it, maybe you should too.

[NewsArchive]

Yes, but you'll need to be in that VM to retrieve the certificate once it's
issued. (Hence my problem when my XP VM crashed and I didn't have a
snapshot taken after I'd requested the certificate.)

Jane

[NewsArchive]

> Yes, but you'll need to be in that VM to retrieve the certificate once it's
> issued. (Hence my problem when my XP VM crashed and I didn't have a
> snapshot taken after I'd requested the certificate.)

K, will store that away. thanks.

Yes, I saw you did that after I asked<g>
--

Mark Riffey
http://www.rescuemarketing.com/blog/
Guy Kawasaki & the Wall Street
Journal staff read it, maybe you should too.

[NewsArchive]

Hi Russ,

> I'm not really up to instructing my domain provider and say "cancel my
> private WHOIS and let the spammers back in". And why is the order form

I don't see spammers associate with WHOIS. It's public on all our sites -
always been. For me there were two issues. First of all the WHOIS for
Icetips had never been updated for the company. It wasn't hosted with
Godaddy and the host asked $20 to change the owner information. I
transferred it to Godaddy for free and updated the owner information there -
for free;) The second issue was the (new) requirement for a phone number to
be verified. We didn't have a phone for the company (we just used our home
phone - I'm not much of a phone person anyway<g>). We solved that by
getting a cellphone but it took a while. I think it took me about a week to
get the silly thing.

I do understand that the verification process has to be strict, but I can
tell you that this is nothing compared to getting a WA state drivers
license!<g> Example: Greencards (which are accepted by FBI and Homeland
Security) are NOT acceptable form of ID for the WA driver license office<g>
I needed my Texas license, Greencard AND my passport to have a valid ID.
Plus a bill in my name to verify residency. Rental agreement for the house
does not count. So next time I do certificate all I have to do is remember
the drivers license thing<bg>

Best regards,

--
Arnór Baldvinsson - Icetips Creative, Inc.
Port Angeles, Washington
www.icetips.com - www.buildautomator.com

Icetips product subscriptions at http://www.icetips.com/subscribe.php

[NewsArchive]

In FL, all you have to do to verify your identity is point at your face and
say "This is me!".

Thanks for the comments. More information is always good. But my old WHOIS
was a source for spammers, which is why its private now. Almost no spam
now.

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm

[NewsArchive]

Thanks. Its just one of those nagging questions left behind by some
articles. That filled it in nicely.

--
Russell B. Eggen
www.radfusion.com
Skype Clarion chat: http://tinyurl.com/2273lm