loxalot
Dec 24 2006, 04:09 PM
I was made aware of this situation and felt it necessary to let all MC users know. Read the following article on Yahoo News.
http://news.yahoo.com/s/ap/20061224/ap_on_...ternet_padlocksI wonder what we as merchants will need to do to comply with this. It would be important for MC to look into this and let us know so we can avoid any future problems. Our customers need to feel secure when purchasing from us, otherwise they'll go somewhere else.
Monster Tech Lead
Dec 24 2006, 05:01 PM
Hi loxalot and, all MC Merchants -
So everyone knows we have heard about this new security topic and everyone at MC have been strong advocates against this new security item by Microsoft. You can read more at:
http://online.wsj.com/wsjgate?subURI=%2Far...OTQxOTk1Wj.htmlOur CEO Champ Mitchell clearly shows how we want all small business to succeed and if there is anything that we can do to help you all succeed, we will do so.
Joe
Jared
Dec 24 2006, 05:41 PM
Joe-
Whether

is against how this is being implemented or not is irrelevant. The point is, IE (along with all of the other major browsers) will be supporting this function in less than a month, whether

decides to implement it or not.
The question is - when will

accept Extended Validation SSL certificates?
gleepbeep
Dec 24 2006, 11:13 PM
I think this is a good thing. Our customers will have greater confidence that what we are selling and doing is legitimate. Whether or not

Commerce likes it or not, Microsoft will do it. So how do we respond to keep up with our competitors that use EV or Extended Verification.
KennyE
Dec 26 2006, 09:36 AM
QUOTE(

Tech Lead @ Dec 24 2006, 05:02 PM) [snapback]119448[/snapback]
Hi loxalot and, all MC Merchants -
So everyone knows we have heard about this new security topic and everyone at MC have been strong advocates against this new security item by Microsoft. You can read more at:
http://online.wsj.com/wsjgate?subURI=%2Far...OTQxOTk1Wj.htmlOur CEO Champ Mitchell clearly shows how we want all small business to succeed and if there is anything that we can do to help you all succeed, we will do so.
Joe
Joe,
Is there supposed to be something by MC in that article? No mention of support for/against by MC that I can see. What did I miss?
Monster Tech Lead
Dec 26 2006, 09:45 AM
Hi Ken
"Small businesses are largely unaware of the issue today, but that seems destined to change after Vista reaches the market. "This is a ticking time bomb that is going to explode," says Champ Mitchell, chief executive of Network Solutions LLC, a Herndon, Va., Web-hosting company and certificate authority whose clients include Aunt Joy's.
"The Internet has been great for American small business," by giving them wide exposure at a low cost, he says. "Microsoft all by itself is getting ready to tilt that field again at an 80-degree angle toward large business.""
Also in comment to gleepbeep - that is what I mean by we will be doing anything possible to help out our small businesses. We are still looking into all the details as to how you as a merchant can qualify for an EV cert and what all goes in to the process. Also if there is any thing else that can be done with not needing an EV cert, we will be looking into that as well.
Joe
KennyE
Dec 26 2006, 09:58 AM
QUOTE(

Tech Lead @ Dec 26 2006, 09:46 AM) [snapback]119454[/snapback]
Hi Ken
"Small businesses are largely unaware of the issue today, but that seems destined to change after Vista reaches the market. "This is a ticking time bomb that is going to explode," says Champ Mitchell, chief executive of Network Solutions LLC, a Herndon, Va., Web-hosting company and certificate authority whose clients include Aunt Joy's.
"The Internet has been great for American small business," by giving them wide exposure at a low cost, he says. "Microsoft all by itself is getting ready to tilt that field again at an 80-degree angle toward large business.""
A
Joe
Ah, missed the NS bit. Was thinking I'd see MC. Thanks,
smckenzie
Dec 26 2006, 04:31 PM
Hi Joe,
Is the jury still out on whether MC is going to accept EV SSL certificates?
As an S Corporation, and I can't be the only MC merchant, I believe we qualify for an EV certficate and would like the option to use it in the future.
macrick
Dec 26 2006, 05:20 PM
QUOTE(smckenzie @ Dec 26 2006, 04:32 PM) [snapback]119462[/snapback]
Hi Joe,
Is the jury still out on whether MC is going to accept EV SSL certificates?
As an S Corporation, and I can't be the only MC merchant, I believe we qualify for an EV certficate and would like the option to use it in the future.
We are an S Corp as well, not certain on the EV Certificate being a good thing though. Can't believe that it would make all that much difference. Just applying for an SSL certificate from NS actually was difficult, in though we had them with others before, NS seemed to need us to cross our t's and dot our i's. If all SSL certificate issuing companies are that difficlut to issue a certificate, don't really follow how easy it would be for a "fraud" site to get one that easy.
Ptch3456
Dec 26 2006, 05:24 PM
QUOTE(smckenzie @ Dec 26 2006, 04:32 PM) [snapback]119462[/snapback]
Hi Joe,
Is the jury still out on whether MC is going to accept EV SSL certificates?
As an S Corporation, and I can't be the only MC merchant, I believe we qualify for an EV certficate and would like the option to use it in the future.
I second that. We are an S-Corp as well, and should qualify. I received something from GeoTrust a couple of weeks ago, regarding all of this... but I didn't read it due to the time of year.
Guess I should do some more checking.
Jared
Dec 26 2006, 06:03 PM
Rick-
Godaddy's SSL certs are down to $19.95 per year, so there can't be a lot of paperwork involved anymore (and there isn't)... just pay with a credit card, and an SSL certificate is yours.
The SSL certificates encrypt the data, but don't (anymore) guarantee the recipient is trusted... the EV certificates should go a long way in making sure the intended recipient of your information is trusted.
I don't see anything on NetSol's pages about supporting/selling EV certs - and since we can only activate NetSol certs on MonsterCommerce now, it probably means we have to wait for NetSol to boycott them and eventually give in... but maybe someone from

can give us some better news.
smckenzie
Dec 26 2006, 06:20 PM
QUOTE
and since we can only activate NetSol certs on MonsterCommerce now, it probably means we have to wait for NetSol to boycott them and eventually give in
I'd forgot about that, and frankly, that sucks. Why shouldn't I have the choice of what SSL certificate to use?
Ptch3456
Dec 26 2006, 07:03 PM
QUOTE(smckenzie @ Dec 26 2006, 06:21 PM) [snapback]119468[/snapback]
QUOTE
and since we can only activate NetSol certs on MonsterCommerce now, it probably means we have to wait for NetSol to boycott them and eventually give in
I'd forgot about that, and frankly, that sucks. Why shouldn't I have the choice of what SSL certificate to use?
When did this happen??
We renvewed our GeoTrust SSL in August without any problem.
If MC has truly taken the choice away... I'm NOT pleased. If they are truly going to force everyone to use theirs (which I will make my opinion known), they need to come up with some better looking SSL logos.
I do not like having choices removed. That is a BAD sign.
deerefun
Dec 26 2006, 07:11 PM
We should have no problem qualifying. What are our options to to get our EV cert and how can we implement it?
Steve
senioremporium
Dec 26 2006, 07:57 PM
Hi All,
You may find the following interesting for details.
Guidelines for Extended Validation Certs.It is a PDF file.
Scooter
PS: I promise i will read more before I open up my mouth, but.. does it seem to me that MSoft is trying to push a BBB-seal-wanna be?.. If so, what does having SSL seals, Verisign seals, BBB seals and Hack verify shields (checked everyday), the MC 128 encription seal and other stuff that still costs money would mean?

PPS: From the following at Verisign's website read it
here i quote:
SSL Certificate FAQ Extended Validation SSL
Extended Validation SSL Certificates were created in direct response to the rise in Internet fraud, eroding consumer confidence in online transactions.
In 2005, 84% of respondents to a Forrester Research study said they don’t think retailers are doing enough to protect their customers online and 24% did not make purchases online due to security concerns.* Before customers share their confidential data online, they want proof of identification from a trusted source. The Extended Validation SSL Standard raises the bar on verification of SSL Certificates and enables visual displays in high-security browsers.
That to me seems a bit unfair that because thieves are getting better at going around software flaws would imply that you may not run a legitimate business online. I don't see a direct connection. .. someone please enlight me.
macrick
Dec 26 2006, 08:44 PM
QUOTE(senioremporium @ Dec 26 2006, 07:58 PM) [snapback]119471[/snapback]
Hi All,
You may find the following interesting for details.
Guidelines for Extended Validation Certs.It is a PDF file.
Scooter
PS: I promise i will read more before I open up my mouth, but.. does it seem to me that MSoft is trying to push a BBB-seal-wanna be?.. If so, what does having SSL seals, Verisign seals, BBB seals and Hack verify shields (checked everyday), the MC 128 encription seal and other stuff that still costs money would mean?

PPS: From the following at Verisign's website read it
here i quote:
SSL Certificate FAQ Extended Validation SSL
Extended Validation SSL Certificates were created in direct response to the rise in Internet fraud, eroding consumer confidence in online transactions.
In 2005, 84% of respondents to a Forrester Research study said they don’t think retailers are doing enough to protect their customers online and 24% did not make purchases online due to security concerns.* Before customers share their confidential data online, they want proof of identification from a trusted source. The Extended Validation SSL Standard raises the bar on verification of SSL Certificates and enables visual displays in high-security browsers.
That to me seems a bit unfair that because thieves are getting better at going around software flaws would imply that you may not run a legitimate business online. I don't see a direct connection. .. someone please enlight me.
This whole thing makes me
Monster Tech Lead
Dec 27 2006, 06:57 AM
Hello Everyone,
I am still working out all the details on how we would accept an EV certificate with our platform, but I do want to say that if you do qualify and can purchase one we should be able to install it. I am still learning about all of this as well and working with our admin teams on this and as soon as I have some more info I will update this post.
Joe
deerefun
Dec 27 2006, 08:42 AM

I would like to know how, with NS being part of the Certification Authority, you at

and NS aren't ready for this?
Steve
bsphere
Dec 27 2006, 10:48 AM
We would qualify and would be interested as well. We currently have a GEO SSL and so when I went on their website, it seems that they are already offering an EV Cert at $899.
Costly, but would like to the decision whether we implement to be ours not MC/NS. From the looks of the install instructions, doesn't sound like it's not do-able, but I don't claim to understand the tech side. Here's the link, so if any MC tech can tell if it can be implemented, I would appreciate it.
GEO EV CERT INSTALL
KennyE
Dec 27 2006, 01:37 PM
QUOTE(

Tech Lead @ Dec 27 2006, 06:58 AM) [snapback]119473[/snapback]
Hello Everyone,
I am still working out all the details on how we would accept an EV certificate with our platform, but I do want to say that if you do qualify and can purchase one we should be able to install it. I am still learning about all of this as well and working with our admin teams on this and as soon as I have some more info I will update this post.
Joe
Joe,
Hasn't MC already implemented this for themselves? Bought in, so to say? When I access the FTP Manager my address bar turns just green as can be, along with a nice little padlock. Or is that accomplished in some other manner? Possibly a different issue?
sc123
Dec 28 2006, 08:17 AM
What's the word on this? I was going to purchase a standard SSL Cert, but now I'm wondering...
-SC
macrick
Dec 28 2006, 07:40 PM
QUOTE(Jared @ Dec 26 2006, 06:04 PM) [snapback]119466[/snapback]
Rick-
Godaddy's SSL certs are down to $19.95 per year, so there can't be a lot of paperwork involved anymore (and there isn't)... just pay with a credit card, and an SSL certificate is yours.
The SSL certificates encrypt the data, but don't (anymore) guarantee the recipient is trusted... the EV certificates should go a long way in making sure the intended recipient of your information is trusted.
I don't see anything on NetSol's pages about supporting/selling EV certs - and since we can only activate NetSol certs on MonsterCommerce now, it probably means we have to wait for NetSol to boycott them and eventually give in... but maybe someone from

can give us some better news.
$20 a year, why in the world is NetSol or GeoTrust so much more? maybe a stupid questoin, but surely $20 doesn't buy you the same thing we all paid for.
Now $900 a year for some EV SSL that we just learned about . . . ? ? ? We just purchased our SSL with NetSol a month ago after being with the GeoTrust the year before.
How many people do you guess are going to be using I.E. 7 ? are the other browsers thinking of implementing this same technology?
Jared
Dec 28 2006, 07:48 PM
Rick-
$19.95 ... it may work in only 99.9% of browsers instead of 100% (needs newer root level credentials that wouldn't be in older browsers) - but... basically, same thing.
IE7 will be implemented in January, and it's expected that all of the other major browsers will follow...
deerefun
Jan 4 2007, 08:10 AM
Can someone from

or N/S please check in here and tell us what are options are to get something in place before we start chasing away customers thru no fault of our own?
Thanks in advance
Steve
Monster Tech Lead
Jan 4 2007, 08:58 AM
Hello All,
After much research and working with our admin teams, we can install these ssl certificates as they are not any different than a regular ssl except for who the certificate authority is, and the process of signing up for the ssl cert.
So you can sign up for one if you would like.
Joe
I agree...we definitely need some info from

/ network solns on this. I can't help but think this may become a nescessity for all merchants. I use IE7 on another computer and have already seen this in play. So larger companies are already using it.
Monster Tech Lead
Jan 4 2007, 09:02 AM
QUOTE
Joe,
Hasn't MC already implemented this for themselves? Bought in, so to say? When I access the FTP Manager my address bar turns just green as can be, along with a nice little padlock. Or is that accomplished in some other manner? Possibly a different issue?
KenneyE
Hi KenneyE,
If you do signup for a netsol ssl or are using our shared ssl which is a netsol ssl cert, we do have a longer validation process than most certificates but it is not the same as an EV cert. IE 7 may be saying this is enough for now but I really can't say as I am not an IE7 expert.
Joe
smckenzie
Jan 4 2007, 10:02 AM
So we can get a GeoTrust EV cert?
Monster Tech Lead
Jan 4 2007, 10:08 AM
Hi Shane
That is correct
Joe
sc123
Jan 4 2007, 04:10 PM
Anyone mind posting links to the order pages for NS EV certs and GeoTrust EV certs?
Thanks!
-SC
smckenzie
Jan 4 2007, 04:16 PM
The GeoTrust cert can be found
here
macrick
Jan 4 2007, 06:59 PM
QUOTE(sc123 @ Jan 4 2007, 04:11 PM) [snapback]119680[/snapback]
Anyone mind posting links to the order pages for NS EV certs and GeoTrust EV certs?
Thanks!
-SC
SC,
Don't think that Net Sol offers an EV Certificate yet. From the looks of the OP it may be never!
Monster Tech Lead
Jan 12 2007, 11:38 PM
Hello All,
NetworkSolutions will soon be offering EV certificates. For more information please view the following page:
http://www.networksolutions.com/help/ev-ce...tes%2Findex.jspJoe
Jared
Jan 13 2007, 09:30 AM
Joe-
Can you clarify whether MC will support ONLY NS EV certs, or ALL EV certs?
deerefun
Jan 13 2007, 04:29 PM
QUOTE(

Tech Lead @ Jan 12 2007, 11:39 PM) [snapback]120029[/snapback]
Hello All,
NetworkSolutions will soon be offering EV certificates. For more information please view the following page:
http://www.networksolutions.com/help/ev-ce...tes%2Findex.jspJoe
Thanks for the update Joe. I almost pulled the trigger and bought a competitive cert but I was hoping to upgrade my NS cert instead. Guess it pays to wait sometimes. I hope that this is coming sooner than later.
Steve
macrick
Jan 13 2007, 05:52 PM
[quote name='deerefun' date='Jan 13 2007, 04:30 PM' post='120044']

Tech Lead)--><div class='quotetop'>QUOTE(

Tech Lead @ Jan 12 2007, 11:39 PM) [snapback]120029[/snapback]</div><div class='quotemain'><!--quotec-->
Hello All,
NetworkSolutions will soon be offering EV certificates. For more information please view the following page:
http://www.networksolutions.com/help/ev-ce...tes%2Findex.jspJoe
[/quote]
Thanks for the update Joe. I almost pulled the trigger and bought a competitive cert but I was hoping to upgrade my NS cert instead. Guess it pays to wait sometimes. I hope that this is coming sooner than later.
Steve
[/quote]
DItto on this,
Hopefully there is a nice discount or credit for the existing NS SSL certificate.
Monster Tech Lead
Jan 13 2007, 06:53 PM
HI Everyone,
While I currently do not know about the pricing of this certificate I do know that it should be coming out soon. In terms of being able to accept and install competitors EV certificates - we can attempt to install any companies ev certificate and as long as it is valid with IIS 5.x or IIS 6.x it should be able to install.
Joe
deerefun
Jan 13 2007, 07:31 PM
QUOTE(

Tech Lead @ Jan 13 2007, 06:54 PM) [snapback]120052[/snapback]
HI Everyone,
While I currently do not know about the pricing of this certificate I do know that it should be coming out soon. In terms of being able to accept and install competitors EV certificates - we can attempt to install any companies ev certificate and as long as it is valid with IIS 5.x or IIS 6.x it should be able to install.
Joe
Joe, When you say that the NS EV cert is coming soon do you mean January/February or are you talking 4th quarter?
Thanks
Steve
deerefun
Jan 27 2007, 08:14 AM
Anything new on a timeline for availability of NS EV Certs?
Thanks
Steve
KennyE
Jan 30 2007, 12:27 PM
QUOTE(deerefun @ Jan 27 2007, 08:15 AM) [snapback]120523[/snapback]
Anything new on a timeline for availability of NS EV Certs?
Thanks
Steve
Steve,
Did you not get the email about it? Here's the web page, says the same as the email.
http://view.ed4.net/v/QTJT/QNU59/BPLOI5/T8...=1&FORMAT=H
Cannen
Jan 30 2007, 01:40 PM
What is the reason for the giant mark-up in cost. If it basically installs that same and has similar info attached to it, what makes it worth > $800?
We just bought 3yrs worth of SSL certs for our 3 sites for around $1000 total. Getting the EV certs will now cost ~$5400 for the same time span and number. Sounds like a great deal for the cert companies without that much added expense to them. Now, small business have a little higher bar to clear when dealing with big-business competitors. YIPPIE!
deerefun
Jan 30 2007, 01:49 PM
QUOTE(KennyE @ Jan 30 2007, 12:28 PM) [snapback]120752[/snapback]
QUOTE(deerefun @ Jan 27 2007, 08:15 AM) [snapback]120523[/snapback]
Anything new on a timeline for availability of NS EV Certs?
Thanks
Steve
Steve,
Did you not get the email about it? Here's the web page, says the same as the email.
http://view.ed4.net/v/QTJT/QNU59/BPLOI5/T8...=1&FORMAT=HNope, Didn't get it and I signed up for more info earlier. Thanks for the link. Sure you don't want to come to work for me Ken.
Steve
Went to this link and clicked on the Register for updates link. Filled out the form and it errors out when I send it. I suppose that is what happened the last time I registered and I didn't notice. Now how am I going to get the discount?
Jared
Feb 11 2007, 02:43 AM
Okay... a few updates. It looks like Netsol is working on EV certs (based on what their page shows), and they will be significantly cheaper than Geotrust (at $899)... Netsol has $399.50/year listed on their page. Even though Geotrust can issue them immediately, it seems like it might be worth the wait (for Netsol) - if it's going to be in the near future... any ideas on that

?
Secondly - it's likely that Microsoft's huge amount of fixes going out on Tuesday will include the IE7 update (which makes EV certs show up green in the address bar)... so, this will (probably) start making a difference next week. It will be interesting to see how it all plays out...
Finally - I mentioned (much earlier in this thread) that

was no longer activating certs from other companies (since Netsol purchased

)... I seem to remember reading this in other threads, but I was definitely wrong... we just renewed our Geotrust SSL yesterday, and there weren't any issues at all with it. So - it seems like

is continuing to support other certs - sorry for the wrong info!
yourfamilylegacy
Feb 12 2007, 06:21 PM
I'm just getting up-to-date on EVs... does anyone know that besides an S corp, does an LLC qualify?
loxalot
Feb 12 2007, 09:42 PM
QUOTE(yourfamilylegacy @ Feb 12 2007, 06:22 PM) [snapback]121487[/snapback]
I'm just getting up-to-date on EVs... does anyone know that besides an S corp, does an LLC qualify?
I read that an LLC does qualify. I hope so; that's what I have.
deerefun
Mar 19 2007, 03:40 PM
Did anyone get an update on this yet?
Thanks
Steve
brain - MC Tech Lead
Mar 19 2007, 05:50 PM
QUOTE(deerefun @ Mar 19 2007, 04:41 PM) [snapback]122782[/snapback]
Did anyone get an update on this yet?
Thanks
Steve
Hi Steve
The EV certificates are available for purchase. You can find more information
here.
Please let us know if you have any questions.
Thanks
Brian
yourfamilylegacy
Apr 13 2007, 11:07 PM
Has anyone purchased an EV Cert? If so, how was the experience?
BCB
Apr 16 2007, 07:07 AM
QUOTE(yourfamilylegacy @ Apr 14 2007, 01:08 AM) [snapback]123505[/snapback]
Has anyone purchased an EV Cert? If so, how was the experience?
We did about a month back, so far they still haven't gotten it fully verified yet. Then again our site really isn't live yet, and they did ask us to make a few changes but it is a very slow process.
QUOTE(BCB @ Apr 16 2007, 09:08 AM) [snapback]123543[/snapback]
QUOTE(yourfamilylegacy @ Apr 14 2007, 01:08 AM) [snapback]123505[/snapback]
Has anyone purchased an EV Cert? If so, how was the experience?
We did about a month back, so far they still haven't gotten it fully verified yet. Then again our site really isn't live yet, and they did ask us to make a few changes but it is a very slow process.
We finally got the cert up and so far it doesn't do jack. The original email (I guess we read it wrong) said the cert was 256 encryption and would "turn the bar green" so far it doesn't do either. It actually doesn't seem to do anything differnet on any browser or platform... unless we are missing something.
My guess is something is wrong with it, if that's the case I'm sure

will figure it out.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.