2011 SSL Certificate Research at Casper College

832 views

Published on

Published in: Technology, Business
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
832
On SlideShare
0
From Embeds
0
Number of Embeds
88
Actions
Shares
0
Downloads
4
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

2011 SSL Certificate Research at Casper College

  1. 1. Casper College DoIT Certificate of Authority Review
  2. 2. Other CA's .vs. Verisign <ul><ul><li>Bottom Line: The other CA's all seem to offer substantial cost savings over Verisign. Verisign probably commands a higher price because of brand name recognition. Online retailers will pay more because they feel buyers may “trust” Verisign over others. </li></ul></ul><ul><ul><li>ACEDICOM, AffirmTrust, Buypass, Camerfirma, Certicamara S.A., Certigna of Dhimyotis, certSIGN, Certum, Chunghwa Telecom, CNNIC, Comodo, ComSign, DCSSI/ANSSI, DigiCert, DigiNotar (Removed), Disig, E-Guven, Entrust, E-TUGRA, Firmaprofesional, GeoTrust, GlobalSign, Go Daddy, Hongkong Post, IdenTrust, Izenpe, Japanese GPKI, JCSI, Kamu SM, Keynectis/Certplus, Microsec, NetLock, Network Solutions, QuoVadis, SECOM Trust, Sertifitseerimiskeskus AS, Staat der Nederlanden, StartCom, S-TRUST, SwissSign, TC TrustCenter, thawte, Trustwave, T-Systems, TURKTRUST, VeriSign, Verizon / Cybertrust, Wells Fargo, WISeKey </li></ul></ul>
  3. 3. Digicert .vs. Verisign <ul><ul><li>Why Digicert was selected for comparison with Verisign </li></ul></ul><ul><ul><li>The college already has 2 certificates with them </li></ul></ul><ul><ul><li>Our past experience has been positive </li></ul></ul><ul><ul><li>Very good Utah based support </li></ul></ul><ul><ul><li>Certificate issuance is much faster </li></ul></ul><ul><ul><li>Competitive pricing when compared to other CA's </li></ul></ul>
  4. 4. Apples to Apples... <ul><ul><li>Verisign SSL Certificates vs. DigiCert & Thawte Compare Table </li></ul></ul><ul><ul><li>http://factoidz.com/verisignssl-review-and-promo-coupon-code/ </li></ul></ul><ul><ul><li>SSL Certificate Comparison (from digicert) </li></ul></ul><ul><ul><li>http://www.digicert.com/welcome/ssl-plus-compared.htm </li></ul></ul><ul><ul><li>SSL Reviews </li></ul></ul><ul><ul><li>http://www.sslshopper.com/certificate-authority-reviews.html </li></ul></ul><ul><ul><li>SSL Certificate List </li></ul></ul><ul><ul><li>http://www.sslshopper.com/ssl-certificate-list.html </li></ul></ul>
  5. 5. Casper College CA's <ul><ul><li>Verisign - 12 certs $14,652 /year </li></ul></ul><ul><ul><li>Digicert - 12 equivalent certs would be $4,824 /year at retail pricing </li></ul></ul><ul><ul><li>Details... </li></ul></ul>
  6. 6. Digicert Options <ul><ul><li>Purchase certs one at a time </li></ul></ul><ul><ul><li>Contract with Digicert for a package of certs which includes their “ Managed PKI - Enterprise SSL Certificate Management” web service. </li></ul></ul><ul><ul><li>Managed PKI is designed to help organizations take control of certificate management. Account administrators can immediately issue new certificates and reissue, replace, and revoke existing certificates on demand. </li></ul></ul>
  7. 7. The Digicert Deal <ul><ul><li>Digicert's ManagedPKI package deal </li></ul></ul><ul><ul><li>Contract quote... </li></ul></ul><ul><ul><li>71%, $9,828.00 / year at retail pricing </li></ul></ul><ul><ul><li>81%, $11,802.00 / year with contract pricing </li></ul></ul>
  8. 8. Examples... <ul><ul><li>WebAccess (Verisign EV) </li></ul></ul><ul><ul><li>https://gw.caspercollege.edu/gw/webacc </li></ul></ul><ul><ul><li>Data Synchronizer (digicert Standard) </li></ul></ul><ul><ul><li>https://nds.caspercollege.edu:8120/login </li></ul></ul><ul><ul><li>Library Remote Database Login </li></ul></ul><ul><ul><li>https://login.jaws.caspercollege.edu/login </li></ul></ul><ul><ul><li>What does digicert EV Look Like? </li></ul></ul><ul><ul><li>http://www.digicert.com/ev-ssl-certification.htm </li></ul></ul>
  9. 9. Questions... <ul><ul><li>Is leaving Verisign where we want to cut corners? </li></ul></ul><ul><ul><li>Does CC need the brand name recognition that Verisign has? </li></ul></ul>
  10. 10. Next Step <ul><ul><li>Continue with Verisign if their brand name recognition is valuable for the college </li></ul></ul><ul><ul><li>See if stakeholders are willing to change to Digicert </li></ul></ul><ul><ul><li>Switch to Digicert at retail pricing </li></ul></ul><ul><ul><li>Switch to Digicert inking a one to three year deal with them </li></ul></ul><ul><ul><li>or </li></ul></ul><ul><ul><li>Investigate additional CA issuers </li></ul></ul>

×