Beltane Web Services

FAQs

Categories

• DNS System
• Domain Names
• Products
• SSL Certificates

Recent FAQs

Question

• Why is my GoDaddy SSL Authorization denied or delayed?

Answer

Why is my GoDaddy SSL Authorization denied or delayed?

GoDaddy has recently become a player in the SSL Certificate market. While we have a good relationship with every other SSL provider out there that our clients choose to use, a good relationship with GoDaddy eludes us.

When a client of ours chooses GoDaddy as an SSL provider and requests an SSL Certificate, GoDaddy sends us an email request to approve the certificate request. However, the request is anonymous.

We get a letter that states:

Dear Secure Certificate Customer,

We have received a Certificate Signing Request for the following domain: <domain></domain>.

Our query of the Whois database returned your name as the administrator for the domain in the certificate request.

In order to verify the validity of the request and that it was submitted by the entity to which the domain in the request is registered, please signify your final approval or disapproval of the certificate request by clicking the link below.

That's it.

"In order to verify the validity of the request and that it was submitted by the entity" GoDaddy wishes me to state that the SSL certificate is requested by the owner of the domain, WITHOUT TELLING ME WHO THE REQUESTER IS. I can not and will not approve an SSL certificate request without knowing that it is the client requesting it, and not some fraudulent request from Nirobi or somewhere. I will not subject myself or the company to that liability.

No other SSL provider does this, only GoDaddy. All over providers tell me a contact name and other identifiable information that allows me to approve the request. After speaking with GoDaddy on several occations, they informed me that they cannot release contact information in violation of their Privacy Policy. Essentially, that their Privacy Policy is more important than the Security that an SSL provides.

Until GoDaddy decides to be a security-minded SSL provider please follow these guidelines:

• Chose another provider (We sell SSL Certificates from several companies)
• Contact us and let us know before you apply for a GoDaddy Certificate.

We typically delay the request for a couple of hours hoping the client will contact us, then we will deny the request as GoDaddy told us to do.

---