Yes any site that sells CD-Keys are legit. Simply because none has managed yet to generate their own codes. The reason why it is cheaper online than in the store is because of one simple reason: recycling; They get the CD key out of the box, and sent the rest back for recycling which they get some money back for, as far as I understood. Don't quote me on it though.