https://

[Jeff Jirsa]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 22 Apr 2003, Redmond Militante wrote:

> hi
>
> possibly dumb question:
>
> i have a website that i'd like to serve over https:// instead of http://
> i'm using apache 1.3.27 freebsd 4.8
>
> can i use something like mod_ssl for this?  do i have to purchase a server certificate off a company like verisign?
>

Yes, mod_ssl is exactly what you want for that. (Incidently, you'll also
probably want a really simple way to redirect traffic to http:// to the
same page on the https:// server, and mod_rewrite can do that for you).

No, you dont HAVE to purchase a certificate, although if you make your
own, most modern browsers will issue a warning that the certificate is not
signed by a trusted authority. If it's a small, personal site, that's not
usually an issue. If you expect to be collecting money from strangers,
they probably won't know why the message is appearing, and that may be bad
for business.

- - Jeff Jirsa
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+pbCS1ZEy6nYcOF4RApEKAKC2xoZWYFPwGz9T9TezKyZQQdpBsgCgkeB3
T0YEov9d+1mLpK67V31zNGk=
=lWAc
-----END PGP SIGNATURE-----