> Surly you could have afforded a better certificate than a C+ graded GoDaddy one
It really doesn't matter what the CA cert is (I mean the CA infrastructure itself is kind of weak coughdiginotarcough) - what should matter more is configuring the server and the key size of the certificate.
I should note it's not hard to get an A+ on the test - I run a small source code hosting service and I have an A+ result from ssllabs.
gitlab has an A-/A and github has an A/A+ (yes - they are 2 different scores based on different servers.
It really doesn't matter what the CA cert is (I mean the CA infrastructure itself is kind of weak coughdiginotarcough) - what should matter more is configuring the server and the key size of the certificate.
I should note it's not hard to get an A+ on the test - I run a small source code hosting service and I have an A+ result from ssllabs.
gitlab has an A-/A and github has an A/A+ (yes - they are 2 different scores based on different servers.