Re: [TLS] AES-OCB in TLS [New Version Notification for draft-zauner-tls-aes-ocb-03.txt]

[Michael Hamburg <[e-mail]>]

Hi Rob,

I guess I’m misremembering my interaction with another CA as Comodo.  Sorry about that.  I don’t have a note of which CAs I tried other than Verisign and StartSSL, so I can’t check for sure.

— Mike

> On Jun 1, 2015, at 1:46 PM, Rob Stradling <[e-mail]> wrote:
> 
> On 01/06/15 19:33, Michael Hamburg wrote:
> <snip>
>> I tried to get one from Comodo about a year ago.  It wasn’t advertised on their website but I asked one of their tech support folks.  They said that it was an experimental feature for business customers only, and would cost me something like $600.  I don’t remember if that was a 1-year or 3-year cert.
> 
> Hi Mike.  It's true that we haven't made a big deal of advertising the fact that we are happy to certify EC public keys and sign using ECDSA these days.
> 
> I'm rather puzzled by your experience with our tech support guys though.  It's never been an "experimental feature for business customers only".  And we don't set different prices for EC certs compared to RSA certs.
> 
> If you place an order directly with Comodo, and provide a CSR containing an EC public key (secp256r1, secp384r1 or secp521r1), then the resulting cert will be signed using ECDSA.  Simple as that.  It should be equally simple if you order via a Comodo reseller, but as DKG said, YMMV.  (I'm guessing that some reseller systems might feel the need to attempt to parse the CSR...and fail because they're not ECC-ready).
> 
>> I looked at Verisign’s catalog as well, and it was labeled as an enterprise feature with an even higher price tag.  Low thousands I think.  I asked the guys at BaySec and they said that this was the shape of the market at that time.
>> 
>> I also looked at StartSSL.  They are free, but only offer RSA certs.  I mostly wanted ECDSA for performance on a super slow home server, and I figured $600 in hardware upgrades would go a lot further than $600 in certs.
>> 
>> Anyway you can get ECDSA certs relatively easily, but not cheaply; or at least, that’s how it was a year ago.
> 
> -- 
> Rob Stradling
> Senior Research & Development Scientist
> COMODO - Creating Trust Online