On 10/06/2011 9:32 a.m., Jay Daley wrote:
X.509 vendors have gone to extraordinary lengths to get people to look at the bit size as a sticker on the box and still nobody does. I can guarantee that nobody will look at the KSK size for the same reasons. This conversation is possibly the only discussion that will ever take place on this issue.
SSL vendors spend energy marking brand and establishing that their brand is more secure than others. Verisign is the most secure - why? Because they told me that. Verisign is also the most expensive and so much so that I don't even bother to look at the product and price for my customers because I know it will be out of the budget. How do I know this? Because industry people have told me that RapidSSL is cheaper and within my budget. Correct - there is no logic here. All my assumptions are based on nothing of substance. The technical merit has nothing to do with the process for SSL at all for some. My concern is about global perception of the .nz space, hence why I agree with Dean. D