Tell me more ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates.

I must be missing something on the quality of the encryption or something. Can someone explain some of the basic differences that lead to these dramatically different prices?

Update $12.99 is a sale price. Typically SSL certificates cost $89.99 on GoDaddy. Here's a link on Godaddy which makes the very comparison this question asks about: http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo002c

thanks,

tim

share|improve this question
1  
I just checked the GoDaddy site and they were listing certs for $69.99 CAD. – Sherwin Flight Apr 18 '12 at 4:49

3 Answers

up vote 9 down vote accepted

Apart from unserious offerings, you can distinguish between cheaper domain-validated SSL certificates and the more expensive extended-validation SSL certificates (EV).

Both certificates are technically the same (the connection is encrypted), but domain-validated certificates are cheaper, because the seller only have to check the domain. The EV-certificates also require information about the owner of the domain, and the seller should check, if this information is correct (more administrative effort).

Normally you can see the difference when you visit the site with a browser. Firefox for example will highlight the domain in blue for domain-validated SSL, and green for extended-validation SSL.

Two examples:

In most cases the domain-validated certificate is fine, the user will have no disadvantages and the EV-certificates are really (too) expensive.

share|improve this answer
thanks, didn't know about the difference between domain vs. extended validation, thanks for that clarification! – tim peterson Apr 18 '12 at 11:29
1  
A person needs to check the physical address of the company for a certificate with extended validation. – ZippyV Apr 18 '12 at 12:09
1  
I think some CAs also offer some form of insurance, should something go wrong (but it's not clear what is covered exactly). (I've written as relatively long answer about the differences between these types of certs if that's of interest.) The main point is that the choice of CA and type of cert only matters as far as the client is concerned. Provided the cert is trusted by default, it depends only on how far the user is willing to check further details (visually, via the UI). – Bruno Apr 19 '12 at 14:12

From the GoDaddy website:

Enjoy the backing of established industry standards. There is NO TECHNICAL DIFFERENCE between our certificates and any other major Certification Authority.

Source: http://www.godaddy.com/ssl/ssl-certificates.aspx?ci=9039

Pricing is a funny thing sometimes. While I have no idea why GoDaddy prices their products the way they do some companies go for more customers at a cheaper rate, whereas others go for a higher price and attract less customers.

As a simple comparison, Company 1 can attract more customers by offering their products at a cheaper price. However Company 2 can offer their products at a higher cost, which could offset a lower number of customers.

Company 1: 100 customers paying $20/month = $24,000/year

Company 2: 200 customers paying $10/month = $24,000/year

So as you can see in this VERY SIMPLE comparison, both models ended up with the same annual revenue, however one company offered their product for twice as much as the other.

share|improve this answer
2  
Don't forget the "Brand" factor -- some products simply have extra in prices just because they are labeled with widely known and recognized company name. – LazyOne Apr 18 '12 at 8:49

Which is worth more, a reference from me or a reference from Bill gates? You have to remember that certs are more than a technical solution, they are someone vouching for you and companies can set whatever price they think their reputation is worth.

share|improve this answer
1  
reference from Bill gates is lame, though I'm happy for Khan Academy. – tim peterson Apr 18 '12 at 16:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.