Re: Certificates?
This WebDNA talk-list message is from 2005
It keeps the original formatting.
numero = 60931
interpreted = N
texte = Yes you can actually issue your own certs. You can create them from a Windows server if you have the correct software installed, or from a Linux box. The basic SSL directions for Apache explain how to issue your own certs. You are correct about the "unknown source" issue. Of course if you are running your own intranet/extranet you could issue your own cert just for security reasons. But if you are collecting private information from random visitors it is best to have a cert issued by an internationally recognized CA source.I find that most Internet users still don't understand Internet security, but the 1000 or so users of one of my secure sites always freak out when they get a security popup. They don't bother reading it, they just see "security risk" and they click the cancel button then call to complain.In a nutshell, if you are doing something for a small private audience go ahead and issue your own cert. If you are going to collect information from the public, get a cert issued by a reputable company.I am a reseller of Thawte. I find they have reasonable discounted prices. It didn't cost me anything to be come a reseller. Matt PerosiPsi Prime, Inc.Kenneth Grome wrote:>> If you have more than a dozen domains, being a reseller is a big gain >> (not just the ability to issue certs to yourself in under 10 minutes).>>>>> Isn't it possible for me to create my own SSL certificate for free?>> What I mean is, doesn't Apache (for example) have a mechanism that > lets me create my own certificate so my visitors can use https when > visiting certain pages ... without my being obligated to spend one > hundred or five hundred bucks for "someone else" to issue me a > certificate?>> I understand that a certificate from an "unknown source" such as > myself might not satisfy everybody, but if it's good enough for my web > site visitors then can't I still do it myself for free?>> A follow up question of course is ... which web servers can this be > done on, and how is it done?>-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list
.To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Yes you can actually issue your own certs. You can create them from a Windows server if you have the correct software installed, or from a Linux box. The basic SSL directions for Apache explain how to issue your own certs. You are correct about the "unknown source" issue. Of course if you are running your own intranet/extranet you could issue your own cert just for security reasons. But if you are collecting private information from random visitors it is best to have a cert issued by an internationally recognized CA source.I find that most Internet users still don't understand Internet security, but the 1000 or so users of one of my secure sites always freak out when they get a security popup. They don't bother reading it, they just see "security risk" and they click the cancel button then call to complain.In a nutshell, if you are doing something for a small private audience go ahead and issue your own cert. If you are going to collect information from the public, get a cert issued by a reputable company.I am a reseller of Thawte. I find they have reasonable discounted prices. It didn't cost me anything to be come a reseller. Matt PerosiPsi Prime, Inc.Kenneth Grome wrote:>> If you have more than a dozen domains, being a reseller is a big gain >> (not just the ability to issue certs to yourself in under 10 minutes).>>>>> Isn't it possible for me to create my own SSL certificate for free?>> What I mean is, doesn't Apache (for example) have a mechanism that > lets me create my own certificate so my visitors can use https when > visiting certain pages ... without my being obligated to spend one > hundred or five hundred bucks for "someone else" to issue me a > certificate?>> I understand that a certificate from an "unknown source" such as > myself might not satisfy everybody, but if it's good enough for my web > site visitors then can't I still do it myself for free?>> A follow up question of course is ... which web servers can this be > done on, and how is it done?>-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Matthew A Perosi
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
Can't load tmpl files (1997)
using french characters (2000)
Upload Maximum (2003)
RE: Fishing: anyone on this group willing to do support? (1998)
syntax question, not in online refernce (1997)
Price Not Appearing (2000)
GrandTotal not right (1997)
shipCost not working v2.1b4 (1997)
Show shoppingcart after remove last item (1997)
PCS Frames (1997)
WebCatalog/Mac 2.1b2 - PIXO (1997)
Secure server question (1997)
2.0Beta Command Ref (can't find this instruction) (1997)
Multiple Pulldowns (1997)
SetHeader Requirements (2002)
Using Applescript to process WebCatalog functions (1998)
SSL/Document Contains NO Data (1998)
Public beta 6 for WebCatalog 4.0 is now available (2000)
Mystery authentication (1997)
(1997)