Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I'm an iPhone Developer and I've recently got into web development. At the moment I have two sites on the internet, and on one of them, I have a very simplistic CMS I've made.

Firstly, do I need to implement HTTPS for this?

If so, is there a good tutorial on getting started with this? What steps do I need to set this up?

share|improve this question
    
why is it neccessary to send data over an encrypted connection so it is safe from eavesdropping? –  Gordon Jan 9 '12 at 15:00
1  
HTTPS, Secured hypertext transfer protocol, has nothing to do with your application layer. Please read on HTTPS before trying to use it. –  omeid Jan 9 '12 at 15:01
    
I have one user for the CMS (apart from myself) and it's a really low-traffic brochure site - is it necessary? –  Alex Coplan Jan 9 '12 at 15:05
add comment

migrated from stackoverflow.com Jan 9 '12 at 15:06

This question came from our site for professional and enthusiast programmers.

3 Answers

Make sure your hosting provider supports https (SSL). You should be able to generate or upload your own certificate using their admin panel.

share|improve this answer
add comment

The SSL/TLS protocol implementation on server side has to be done in the web-server - usually Apache HTTPD.

Therefore enabling HTTPS is totally independent of PHP. You should check the documentation of the used web-server.

share|improve this answer
add comment

Think about this:

In early days, the receptionist would you give a safe box at the hotel's safe box room to put your valuable stuff there and you also would get a key to open that box.

When you would go to that box latter to open it, you would realize that two keys are required to open that box. One is your key and the other one is at the reception. One of them is never enough. You would need both to open it.

That's exactly what is happening for SSL either. If you transfer valuable (sensitive) data back and forth between your browser and server, you need SSL.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.