An SSL certificate (Secure Socket Layer Certificate) is an X.509 certificate that is issued for the purpose of identifying peers in an SSL connection. It is assigned to a domain or hosting account.
21
votes
5answers
1k views
Are the different types of SSL certificates a bit of a scam?
I'm looking into getting a few SSL certificates for domains to cover the following:
autodiscover.example.com
remote.example.com
www.example.com
Wildcard certificates are too expensive, so I'm ...
19
votes
4answers
2k views
Is it a bad practice to use self-signed SSL certificates?
SSL certificates are pretty expensive for individuals, especially if you need to secure different subdomains. I am considering using self-signed certificates, as my primary focus is to secure the ...
19
votes
3answers
2k views
What are the benefits of a more expensive SSL certificate?
I've been comparing prices of different SSL certificates and found a massive difference in prices between different providers.
If we take ...
13
votes
2answers
412 views
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
10
votes
6answers
11k views
Is unique IP address a must for SSL?
The shared hosting company told me that if I buy an IP address then it will be applicable for the addon domains too. What does it mean? Then the SSL certificate won't work since there will be more ...
10
votes
2answers
168 views
Choosing which domain to secure
We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
9
votes
6answers
525 views
SSL certificate provider
I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them?
Thanks!
9
votes
3answers
11k views
IIS 7 Require SSL automatically redirect to https://
I've configured IIS 7 to require SSL. I'm wondering if I can automatically redirect non-ssl requests to be encrypted.
For example, if a user types in http://domain.com, can IIS redirect the request ...
9
votes
2answers
732 views
Using wildcard certificates for multi-server deployment
Currently we are deploying a beta API for our services and we want that all request/responses from the API works over https. I'm confused about using wildcard certificates for both api and www urls. ...
8
votes
2answers
778 views
How to find domain registrar and DNS hosting with good DNSSEC support?
Simplified problem
I want to buy a domain and make a website that is fully secured with DNSSEC.
I want to make sure that only the one right SSL certificate could be validated by the browsers and all ...
7
votes
3answers
4k views
Why is godaddy HTTPS/SSL certification so much cheaper than digicert, thawte, and verisign?
I am a novice on HTTPS/SSL but GoDaddy charges $12.99 and Digicert, thawte, and Verisign charge $100-1000+ for SSL certificates.
I must be missing something on the quality of the encryption or ...
7
votes
2answers
554 views
Example of live site with trusted, signed but revoked certificate?
I'm drawing up some documentation for users with the intent on educating them on certificate revocation. I would like to include screen shots of browsers to demonstrate the user experience when ...
6
votes
2answers
185 views
Do I need SSL for “Coming Soon” email signup form?
My website is a few months from going live, and marketing efforts are beginning. I would like to put up a short coming soon page with an email field to sign up for updates. Does this require an SSL ...
6
votes
4answers
426 views
free SSL certificates?
how comes that some SSL certificates are free ? What does that mean ? Are they secure or not ?
6
votes
2answers
317 views
Looking for SSL certificates (first time)
I need to buy SSL certificates and it is the first time.
1) My option would be the "cheapest ones". What am I going to risk, what kind of service quality I'm going to lose if I buy the cheapest ? Are ...
6
votes
2answers
113 views
Does https site needs extra configuration after installation of SSL certificate?
I recently developed an incentive website for a European bank, and one of the requirements was SSL - the website displays some personal customer data (though no financial or really sensitive data).
...
6
votes
2answers
262 views
SSL Warranty - Meaningless?
Lots of SSL seem to come with a warranty:
Extended Validation, Green Address Bar
40-bit minimum to 256-bit encryption
USD $100,000 warranty
VeriSign Trust™ Seal and services
Has anyone in history ...
6
votes
2answers
290 views
Using wildcard certificates
Can I buy a wildcard certificate to use the same SSL certificate on multiple domains? For example, www.example.com, www.example.org and www.example.net (on different hosting services)?
If I can,
Is ...
6
votes
1answer
267 views
Should we get an EV Certificate?
Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
5
votes
4answers
241 views
is godaddy SSL standard certificate compatible with *all* browsers?
Could you answer to at least one of these questions:
1) is godaddy SSL standard certificate compatible with all browsers (chrome and safari on iphone, or android browsers included) ?
...
5
votes
2answers
396 views
Ad service that supports ssl (secure publishing)
Is there an add service like adsense that supports SSL ads? I wish to put ads on a secured (https) pages but Google Adsense doesn't support it. I know Adbrite works for text based SSL ads but I ...
4
votes
1answer
82 views
What makes a SSL certificate “signed”?
When you buy a SSL certificate from Comodo, it is signed by Comodo and therefore trusted. How is it signed though? Why can't anyone sign the certificate pretending to be Comodo?
4
votes
2answers
262 views
How to use the private and public keys?
I am new to ssl certificates, i wanted to learn about ssl certificates, and I generated private and public keys myself while logged into cpanel, I wonder how to use those and generate a secured ...
4
votes
3answers
263 views
SSL versus EV SSL
As I understand it, SSL certificates verify the connection between the host and the browser, preventing MITM attacks. Is it true that EV SSL verifies the host itself, thus preventing (in theory) ...
4
votes
1answer
3k views
How to install mod_ssl for Apache
I have installed Apache httpd a while ago and have recently come back to it to try setup SSL and get it serving several different tomcat servers.
At the moment I have two completely separate tomcat ...
4
votes
1answer
96 views
How to promote the quality/security of your a website to your its customers?
Our organization is building a Drupal web platform that we aim at reselling as a cloud service. In order to provide our customers with maximum confidence in our solution, we're looking at ways of ...
4
votes
2answers
295 views
Is it possible to share SSL certificates across servers?
We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
4
votes
2answers
220 views
Would using a self-signed SSL certificate be appropriate in this scenario?
Now I realize this topic has been discussed in a few questions before (specifically this one), but I'm still a little confused about the implications of using a self-signed certificate, and how I ...
4
votes
3answers
103 views
What is SSL Hosting and what are the requirements for making secure transaction
I am here in order to collect the information for making secure online transaction. My client has got a online shopping site. We are now having cart in our own site and transfering the cart detail to ...
3
votes
4answers
2k views
How can I set the default page for an https request?
We have a website which has a Virtual Directory containing the secure portion of the website.
If users come to http://www.mydomain.com, they should get directed to default.aspx of the main site, but ...
3
votes
1answer
136 views
How to add lock symbol to my website using private SSL in https pages
I just purchased SSL for my website from hostgator, so that I can add lock symbol in my website, when users visit https://www.mysite.com
For example:
Now they have installed the certificate, but ...
3
votes
3answers
1k views
Will a simple domain validated SSL certificate show a 'green lock'?
I'm looking into buying an SSL certificate for my domain. I'm considering buying: https://www.ssl.nu/en/products/regular+ssl/ssl+basic/ which is just a domain validation certificate I think. Will ...
3
votes
1answer
413 views
Does MSIE recognise StartCom as an SSL Certificate Authority?
Ok, so I'm thinking about getting in on the SSL action, so that my sites can be secure etc, and after hours of shopping for the best priced certificate, I find out that StartSSL offer a free one.
One ...
3
votes
4answers
3k views
Free (Or Cheap) Alternatives For An SSL Certificate For Facebook Apps
In October (from what I remember) Facebook will require HTTPS connections to pages and app's that are hosted away from Facebook. At the moment, it comes up with a popup saying "do you want to turn ...
3
votes
3answers
530 views
SSL Certificate and IP Binding
I try to setup SSL on my server for only one web site (I have few there using IIS7).
I bought an SSL certificate, installed it but when I come to bind I don't have to option to specify the host ...
3
votes
3answers
841 views
What is needed to add DNSSEC to my site?
What is needed to add DNSSEC to my site?
Is it like HTTPS/SSL that I have to buy a certificate, or can I generate one myself to use? Is there any free way I can use DNSSEC or do I have to pay for ...
3
votes
1answer
156 views
What would be a list of common website expenses?
For example: seo; web-development; site-maintenance; hosting; domain; ssl-certificate; etc.
___UPDATES___
FROM_ME: Stock-Photos; Logo; Legal; eCommerce_Shopping-Cart
FROM_Lèse_majesté: ...
3
votes
1answer
56 views
HTTPS connection treated differently across browsers
I am using an SSL certificate for a website and the server redirects all http connections to https (a conscious choice). A tool provided by the CA says that the certificate has been installed ...
3
votes
2answers
171 views
What will be the impact on SEO if we remove our SSL certificate (url become http instead of https)?
For some weird reason the content accessed though our domains is returned via SSL HTTPS on all domains pointing to the server.
https://domain.com leads to our website, with a proper SSL certificate ...
3
votes
1answer
95 views
Do I need an SSL Certificate?
I'm thinking about building an app that lets users upload images to sites like Flickr. They would need to enter their password to do this. I would send the data through PHP, do I need to get a SSL ...
3
votes
1answer
429 views
HTTPS iframe inside an HTTPS page
I'm developing a Wifi Homepage, which comes by default for all the users of the hotspot. In order to redirect them properly to my homepage, I'm using an SSL certificate, and the page is hosted ...
3
votes
4answers
374 views
is RapidSSL wildcard cert supported by major browsers?
I'm thinking of buying a wildcard SSL cert from clickSSL :
http://www.clickssl.com/rapidssl/rapidsslwildcard.aspx
That would be a rapidssl certificate, and I was looking into my firefox options to ...
3
votes
2answers
343 views
certificate for website login
Not sure if this belongs here or at serverfault...
I've seen websites where, to login to the website, requires a digital certificate to be installed for the user logging in. As far as I can tell, ...
3
votes
1answer
330 views
SSL redirection
I want to redirect one of my domain hosted in a domain provider to a different server where I have a Tomcat based application installed. I have purchased SSL for the server with Tomcat installed. The ...
3
votes
3answers
244 views
I've renewed my SSL certificate… do I need to “do” anything more?
I've had an SSL certificate for a site for 2 years (from GoDaddy), and it was about to expire in a few weeks. I renewed with GoDaddy for another 2 years. Do I need to update anything manually on the ...
3
votes
2answers
35 views
CPanel - Wild card SSL - How to point *.domain.com to one root and sub.domain.com to another root
I have a wildcard (*.domain.com) SSL certificate installed on my CPanel server. I have domain.com configured to point to /domain.com as its document root and use this wildcard SSL certificate. I ...
2
votes
9answers
421 views
Do i need an ssl certificate for a site allowing users to make donations online?
Hii,
The site is technically a foundation, a non profit organization website, which will allow people to make donations for the cause. Is purchasing an SSL certificate for this site a good idea?
How ...
2
votes
2answers
91 views
When do I need a website certificate?
Can someone explain me when I need a web site certificate?
I will have a web app that will be used for representing live data. Do I need a certificate for that type of web application? A user will be ...
2
votes
3answers
338 views
EV SSL Certificates - does anyone care?
Is any one aware of any data or studies from an impartial source that show the impact of EV SSL certificates on customer behavior? I've been unable to find any such studies. If an EV SSL certificate ...
2
votes
3answers
96 views
Should I get an SGC enabled SSL certificate?
I'm in the market for a new SSL certificate and am wondering if I should get an SGC enabled certificate or not? In the past I have just used cheap SSL certificates but since this is for a new company ...
