Does anyone have any links or advice about adding SSL to a website?
migrated from stackoverflow.com Feb 9 '11 at 20:42
This question came from our site for professional and enthusiast programmers.
closed as not a real question by John Conde♦ Feb 9 '11 at 20:47
It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center. If this question can be reworded to fit the rules in the help center, please edit the question.
From a programming point of view, you won't notice a lot of difference. The connection between the user's browser and your web server is encrypted, but your code on the web server doesn't have to be concerned about the fact that it's an HTTPS connection. You will still see the same requests and be able to send the same responses, with the web server managing the encryptiong itself.
Having said that, there are sometimes aspects you may be concerned with when programming. For example, there will be a way (depending on your web server) to find out whether a given connection is encrypted or not. You may also want to redirect users to an encrypted or non-encrypted URL as your particular application needs.
Here you found with diagram; Secure Socket Layer. How SSL Security Works?
It is a certificate, you need to configure it on you web server to protect your website.
In case of IIS
First you need to generate a Server Certificate Request to get SSL certificate.
In IIS Manager -> Right click your website -> Select Directory Security Tab -> Click Server Certificate button to generate a request.
You need to obtain a certificate from a Certification Authorities
More about SSL and Certificates (IIS 6.0)
Maybe this is going to help you.
They work if you want to install the certificate, in other words, that you own the server in which you are hosted, but in sites hosted like in godaddy, etc, you buy the ssl certficate and the installation is done almost automatically from there.
So it depends, but the document from digicert can give you the main idea of the installation in different platforms.
btw- Yes, it is a security protocol only, the "configuration" it's part of the certificate, so the communication is encrypted and that's it.