Code Signing - Deciding between Thawte and VeriSign

Code Signing - Deciding between Thawte and VeriSign

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Code Signing - Deciding between Thawte and VeriSign ulevanon 08-16-2005
Posted by on August 16, 2005, 11:13 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

I've gone through past threads on code signing.

I'm interested to get an AuthentiCode cert, and would like to know:

- Is there a difference between Thawte and VeriSign certs, in the way
the browser (Win XP SP2) recognises the CA?

- Could in some instances, Thawte certs might might have less
credibility?

I know that Verisign is automatically recognised as a trusted CA by
microsoft products.

- Are there any differences with Thawte certificates?


This is a crucial fact - if Thawte certs get a different alert, with a
more frigthening warning, like "untrusted/unrecognized
CA".


Posted by Miha Pihler [MVP] on August 16, 2005, 1:29 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

For most of my customers I use Thawte since it is cheaper. I never had any
problems (or complaints) that something wouldn't work. I only use Verisign
for customers that insist on using Verisign.

You can even test this with different browsers on https://www.thawte.com/.
Not all browsers will trust certificates installed in Windows (like IE
does). Still I believe that Thawte should not give you any troubles.

In the end Thawte was bought by Verisign few years ago...

I hope this helps,

--
Mike
Microsoft MVP - Windows Security

> Hi,
>
> I've gone through past threads on code signing.
>
> I'm interested to get an AuthentiCode cert, and would like to know:
>
> - Is there a difference between Thawte and VeriSign certs, in the way
> the browser (Win XP SP2) recognises the CA?
>
> - Could in some instances, Thawte certs might might have less
> credibility?
>
> I know that Verisign is automatically recognised as a trusted CA by
> microsoft products.
>
> - Are there any differences with Thawte certificates?
>
>
> This is a crucial fact - if Thawte certs get a different alert, with a
> more frigthening warning, like "untrusted/unrecognized
> CA".
>



Similar ThreadsPosted
Code signing a "Flash" .EXE file issue / Code sign any .EXE? March 6, 2008, 6:48 am
Signing Code with Microsoft CA certificates December 29, 2006, 10:06 am
Expired Code Signing Cert with VBScript September 12, 2006, 9:17 am
Issuing Code-signing Certificate with Private Key December 27, 2007, 11:41 am
Issue with enterprise internal Authenticode code signing certificate More options April 3, 2007, 8:41 am
IIS 6.0 cannot download a Verisign CRL !! September 2, 2005, 4:50 am
Verisign Smart Cards? September 27, 2007, 8:53 am
Generate Verisign certs for one or two year ? August 9, 2005, 1:08 pm
HTTP Error 403.13 - Verisign IP Address November 7, 2005, 3:03 am
Verisign certificate expired - who do we buy to update? September 14, 2007, 10:50 am

The site map in XML format XML site map

Contact Us | Privacy Policy