HI All, I am considering buying this: http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo003a Since I have a domain that will be collecting data and processing payments. Where can I find instructions on how to install the certificate? Do I have to run another domain or sub domain for the store? Or can I just run the whole domain on https? Thanks, -Jason
ML wrote:> Since I have a domain that will be collecting data and processing payments. > > Where can I find instructions on how to install the certificate?Depends on what web server software your running looks like godaddy has quite a few sets of instructions http://help.godaddy.com/article/5346> Do I have to run another domain or sub domain for the store? Or can I just > run the whole domain on https?You can run the whole domain on http and https, normally what sites would do is run the normal site in http, then have redirect/rewrite rules setup so when a user goes to a part of the site that should be "secure" then the site automatically sends them to the secure version of that page. nate
On 1/26/2010 4:38 PM, ML wrote:> HI All, > > I am considering buying this: > > http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo003a > > Since I have a domain that will be collecting data and processing payments. > > Where can I find instructions on how to install the certificate? > > Do I have to run another domain or sub domain for the store? Or can I just run the whole domain on https? > > Thanks, > -Jason >Is your network PCI certified? If you are going to be processing payments there are requirements that will need to be met that go far beyond just having an SSL certificate. Those requirements get even more stringent if you plan on storing cardholder information. You can find a copy of the standards at https://www.pcisecuritystandards.org/ . As for your question, you can just run the entire domain under https if you like. I am assuming you will be using Apache and on any reasonable hardware it will handle it without even raising a sweat assuming you aren't talking about outrageous volume levels. ...Greg
From: ML <mailinglists at mailnewsrss.com>> I am considering buying this: > http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo003a > Since I have a domain that will be collecting data and processing payments. > Where can I find instructions on how to install the certificate? > Do I have to run another domain or sub domain for the store? Or can I just run > the whole domain on https?FYI, if you get a normal certificate, you can only secure one fqdn. If you need to secure more, you need a wildcard certificate. JD
Ml wrote on Tue, 26 Jan 2010 16:38:00 -0800:> Where can I find instructions on how to install the certificate?Exactly where you buy it. Please don't abuse this list as support for everything. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com
On Tue, Jan 26, 2010 at 7:38 PM, ML <mailinglists at mailnewsrss.com> wrote:> I am considering buying this: > http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo003a > > Since I have a domain that will be collecting data and processing payments. > > Where can I find instructions on how to install the certificate? > > Do I have to run another domain or sub domain for the store? Or can I just run the whole domain on https?If it is a single root certificate, it will be easier to install. If it has an Intermediate certificate (chained) it's a little harder to install. You must have a Dedicated IP address for that domain. You can get a RapidSSL from Namecheap.com (single root) for $10.95 for one year. I got a free StartSSL (chained) certificate. I believe you should only have the sub domain encrypted, because pages that are encrypted are a little slower.
-----Original Message----- From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of ML Sent: Wednesday, January 27, 2010 1:38 AM To: CentOS mailing list Subject: [CentOS] Installing an SSL Cert HI All, I am considering buying this: http://www.godaddy.com/Compare/gdcompare_ssl.aspx?isc=sslqgo003a Since I have a domain that will be collecting data and processing payments. Where can I find instructions on how to install the certificate? Do I have to run another domain or sub domain for the store? Or can I just run the whole domain on https? Thanks, -Jason _______________________________________________ Ever considerd cacert.org ? ______________________________________________________________________ Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.