Am 25.11.2018 um 14:35 schrieb Alice Wonder alice@domblogger.net:
Hi, I'm getting increasingly paranoid.
Something I said on a certain social media site several months ago was modified - then reported - then by account was banned until I agreed to delete it.
Obviously since what I said was modified I didn't have any issue with deleting it but I want more than just DKIM sigs on my e-mail now.
Anyway looking for S/MIME I can use to sign and/or encrypt but mostly sign. Not interested in GnuPG or self-signed S/MIME - I want something that can be trusted because someone else that is trusted actually vouched for me.
The "free for personal" S/MIME from Comodo didn't work. Browser said it did but there was nothing to export for me to then import. I suspect it is because I used private browser window, I really don't like the idea of a private key stored in browser anyway. And it never asked for a password to encrypt the private key, nor let me specify key strength (only let me choose between medium and high - I assume high is 4096 but I don't know, it didn't say)
Didn't like the "browser generated" process, even if it had worked and generated the final product I could export - I really didn't like the process and have serious questions about the wisdom of a private key without a pass phrase stored in an application that interacts with web sites.
Anyway so used openssl to create private key (with aes-256 encryption and pass phrase) and then a CSR.
But I can't find anyone who sells certs for S/MIME to send the CSR too.
Globalsign but they wanted $89 - no one else.
Found a few sites that offered to "send me a quote" that I think were intended for corporate accounts.
Where do regular users who just want an inexpensive certificate usable for S/MIME from a CSR generated the traditional way go to buy a cert?
-=-
Off Topic 2
I'm going to strangle whoever it is at Google that thinks it is a good idea to put so many video results at the top of search results for this kind of thing. I'm really getting sick of how highly ranked videos now are in search engines. _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos
Good question.
Usually, these are more targeted towards businesses, ordering a number of client-certificates (not just one or two).
Do you have a business (your website looks like a business)?
Here in Switzerland, we use QuoVadis for these certificates (and the normal ones). I’m not sure if they provide service to US citizens.
I suggest you consider subscribing to ProtonMail, if nothing else comes forwards.
They’ve got a „2 years for 1“ special up for another couple of hours.
Best Regards Rainer