Tagged Questions
0
votes
2answers
27 views
Using SSL Certification in Multiple Locations
I have some issues with respect to using SSL Certificates. I have a website hosted in UK and I also have an organisation in South Africa hosting my company application online for web access.
The ...
1
vote
1answer
47 views
Multiple SSL certificates under one organization?
Now that I have my LLC formed, I intend to purchase several EV SSL certificates for a few of my popular online stores. My question is if it is possible to purchase and set up several EV SSL ...
2
votes
2answers
110 views
Phpmyadmin http password security
Is my password sent unencrypted when using Phpmyadmin through http?
If not, is there any downside using http compared to https?
1
vote
2answers
97 views
1024 bit to 2048 bit certificate differences in how we access our portal
Why now that we have gone from 1024 to 2048 do we need to put the www in front of our portal site when we never used to.
1
vote
0answers
35 views
Are there considerations for expiring SSL certs for inactive domains?
I have a few domains that have effectively been "retired" though our company plans to keep them registered in perpetuity.
However, soon a few of the SSL certs for the inactive domains are set to ...
0
votes
3answers
194 views
Need private personal access to ~three PHP pages
I would like secure access to the text output by three PHP scripts (the text output is JavaScript and html) . The security level is much less then financial data but important none-the-less. I have ...
3
votes
1answer
413 views
Does MSIE recognise StartCom as an SSL Certificate Authority?
Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one.
One ...
1
vote
1answer
209 views
SSL on multiple directories
I have a website that is http, but has a port set up for https for a specific directory that is for the shopping cart. Now I'd like to use our SSL on a different directory in the same site as well. ...
2
votes
1answer
253 views
DNS name/host-header specific url-pattern/security-constraint, to not require SSL with Tomcat6
I am needing to enable SSL on an application hosted through Tomcat6 and I have added the following to the tomcat web.xml:
<security-constraint>
<web-resource-collection>
...
4
votes
2answers
262 views
How to use the private and public keys?
I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
3
votes
1answer
95 views
Do I need an SSL Certificate?
I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
2
votes
1answer
1k views
How can mixed content compromise an entire HTTPS session?
Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors.
Most browsers will point out when you are viewing an HTTPS page which loads insecure ...
1
vote
2answers
141 views
How to setup SSL to protect secure information
At the moment I have a website running in quite an insecure way, I'll refer to it as example.com.
To add better security we're starting to store passwords using bcrypt but we are currently not using ...
2
votes
3answers
252 views
What is necessary to implement HTTPS?
I'm an iPhone Developer and I've recently got into web development. At the moment I have two sites on the internet, and on one of them, I have a very simplistic CMS I've made.
Firstly, do I need to ...
1
vote
1answer
88 views
extra configuration needed after installing SSL certificate?
We recently developed two rather simple PHP applications for AXA (European bank). URL's are axa.tfo.be/incentives/cipres and axa.tfo.be/incentives/zrkk (access to both sites is restricted to visitors ...
6
votes
2answers
113 views
Does https site needs extra configuration after installation of SSL certificate?
I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data).
...
2
votes
1answer
82 views
HTTPS on all pages where user is logged on
I know this is considered best practise to prevent cookie hijacking. I would like to adopt this approach, but ran across a problem on our forum where the users post images which either aren't posted ...
4
votes
1answer
82 views
What makes a SSL certificate “signed”?
When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
2
votes
3answers
952 views
Do internal intranet websites need to be secure?
The question is in the title.
Does an internal site need to have https security?
For example we have an internal site that handles our client's license keys -- do we need for that to be secure since ...
7
votes
2answers
425 views
Does SSL really matter for most websites?
I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL.
I've read plenty of ...
4
votes
2answers
374 views
HTTP for one part of the site, HTTPS for other
We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS?
For example, WordPress (which I know) is located at http://foo.com, but we want to have ...
4
votes
3answers
263 views
SSL versus EV SSL
As I understand it, SSL certificates verify the connection between the host and the browser, preventing MITM attacks. Is it true that EV SSL verifies the host itself, thus preventing (in theory) ...
6
votes
5answers
4k views
Identify “non-secure” content IE warns about
As many know, if you serve a page over https and the content loads resources (images, stylesheets, js, SWF objects, etc) over http, older versions of Internet Explorer will show the user a warning ...
6
votes
1answer
4k views
Thawte/GeoTrust/VeriSign 2048 Bit Root migration and Intermediate SSL Certificates
Thawte, GeoTrust, VeriSign and other Certificate Authorities are currently in the process of changing from a 1024 bit MD5 based root certificate to a 2048 bit SHA-1 based root to "keep in line with ...
3
votes
2answers
10k views
Can I skip the PEM pass phrase question when I restart the webserver?
After buying a multi-domain SSL certificate I have started testing it with the Nginx webserver (following documentation in their SSL wiki page).
Everything is fine, it works and I get a green ...
6
votes
5answers
203 views
What do I need to do to enable my site to accept credit cards?
I want to store my customers' credit card information in my database so that they can quickly check out again without having to re-enter their info. What do I need to know about security/https/etc to ...
13
votes
2answers
412 views
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
