Secure Sockets Layer (SSL) is a cryptographic protocol that provides communications security over the Internet.
6
votes
2answers
317 views
Looking for SSL certificates (first time)
I need to buy SSL certificates and it is the first time.
1) My option would be the "cheapest ones". What am I going to risk, what kind of service quality I'm going to lose if I buy the cheapest ? Are ...
6
votes
1answer
267 views
Should we get an EV Certificate?
Our regular SSL provider is offering EV certificates for under $US200, and it just so happens that the certificate for our B2B e-commerce site is expiring in a month (which should give us enough time ...
6
votes
5answers
4k views
Identify “non-secure” content IE warns about
As many know, if you serve a page over https and the content loads resources (images, stylesheets, js, SWF objects, etc) over http, older versions of Internet Explorer will show the user a warning ...
3
votes
2answers
250 views
CA For A Large Intranet
I'm managing what has become a very large intranet (over 100 different hosts / services) and will be stepping down from my role in the near future. I want to make things easy for the next victim ...
6
votes
3answers
7k views
Why would you use document.location.protocol instead of plain // prefixed urls?
For instance Google Analytics uses document.location.protocol in the boilerplate for tracking:
<script type="text/javascript">
var _gaq = _gaq || [];
_gaq.push(['_setAccount', ...
9
votes
5answers
2k views
HTTPS for entire site
I'm working on a fairly standard web site with public content plus personal/customized content for registered users. I know I need to use HTTPS when users are logging in or sending credit card ...
3
votes
5answers
1k views
What is the best kind of checkout system for a website?
I have worked with quite a few checkout systems and eCommerce platforms. Are there certain kinds of interfaces that convert sales better than others?
For me there are really only two questions:
...
9
votes
6answers
525 views
SSL certificate provider
I need a SSL certificate for a new site I'm building and I have to choose a SSL provider. What to look for when choosing and what's your experience dealing with them?
Thanks!
10
votes
2answers
168 views
Choosing which domain to secure
We've got a website that is served on both www.example.com and just example.com - we've never done any sort of forcing users from one domain to the other, so if they land on example.com then that's ...
3
votes
4answers
375 views
is RapidSSL wildcard cert supported by major browsers?
I'm thinking of buying a wildcard SSL cert from clickSSL :
http://www.clickssl.com/rapidssl/rapidsslwildcard.aspx
That would be a rapidssl certificate, and I was looking into my firefox options to ...
6
votes
1answer
4k views
Thawte/GeoTrust/VeriSign 2048 Bit Root migration and Intermediate SSL Certificates
Thawte, GeoTrust, VeriSign and other Certificate Authorities are currently in the process of changing from a 1024 bit MD5 based root certificate to a 2048 bit SHA-1 based root to "keep in line with ...
14
votes
2answers
7k views
Is there a way of using HTTPS with Amazon's CloudFront CDN and CNAMEs?
We use Amazon's CloudFront CDN with custom CNAMEs hanging under the main domain (static1.example.com). Although we can break this uniform appearance and use the original ...
8
votes
2answers
2k views
How to serve static content without https in a secure site?
I want to serve static content from my site but my site is https-only. My static http server only serve http content (non https) but many IE users are complaining about being unable to log into.
What ...
3
votes
2answers
10k views
Can I skip the PEM pass phrase question when I restart the webserver?
After buying a multi-domain SSL certificate I have started testing it with the Nginx webserver (following documentation in their SSL wiki page).
Everything is fine, it works and I get a green ...
4
votes
2answers
297 views
Is it possible to share SSL certificates across servers?
We have a web application we will be launching soonish and for right now we just have one SSL/HTTPS certificate. We have this one certificate shared across 3 servers(in a cluster for load balancing) ...
9
votes
2answers
733 views
Using wildcard certificates for multi-server deployment
Currently we are deploying a beta API for our services and we want that all request/responses from the API works over https. I'm confused about using wildcard certificates for both api and www urls. ...
21
votes
5answers
1k views
Are the different types of SSL certificates a bit of a scam?
I'm looking into getting a few SSL certificates for domains to cover the following:
autodiscover.example.com
remote.example.com
www.example.com
Wildcard certificates are too expensive, so I'm ...
6
votes
5answers
203 views
What do I need to do to enable my site to accept credit cards?
I want to store my customers' credit card information in my database so that they can quickly check out again without having to re-enter their info. What do I need to know about security/https/etc to ...
13
votes
2answers
413 views
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from?
If I need HTTPS / SSL encryption on my web site, does it matter who I get my certificate from? Are some SSL certificate vendors better than others? If so, why?
