At work, I have a bunch of web interfaces that use plain http or self signed certificates (load balancer management interface, internal wiki, cacti, ...).
None is reachable from outside specific vlans/networks.
For home usage, I use cacert SSL certificates.
I was wondering if I should suggest my employer to use cacert SSL certificates instead of self signed certificates and plain http. Anyone use cacert ssl in production? What are the pro/cons? Does it improve security? Is it easier to manage? Anything unexpected? Can it affect qualys scans? How can I convince them?
Of course, paid certificates for public websites would remain unchanged.
(just curious) Free ssl certificate from companies do not seem to be class 3. I had to show my passport and be present physically to get class 3 from cacerts. Isn't there warning in browsers for each class 1?
Anyway, I would have the same question about any free CA : Is it better than using self signed and plain http, and why ?
I would do it for ease of management, server side. Anything I missed?
Disclaimer : I'm not a cacert association member , not even Assurer, just a regular happy user.