[Date Prev][Date Next][Thread Prev][Thread Next][Minivend by date
][Minivend by thread
]
Re: [mv] [MV4.04a] AOL , whats up with them ??
****** message to minivend-users from Eric Paul <epaul@spellbook.net> ******
At 10:21 AM 10/11/00, you wrote:
>If there ever was an advertisement for paying the $125 to get a certificate,
>this is it.
>
>I say this over, and over, and over again and people continue to try and
>do this false economy. If you continue to battle this, it is on your and
>your customer's head.
>
>None of this is guaranteed to work, but:
>
> * You could try "WideOpen Yes" in catalog.cfg, that will help, but make
> the catalog ultimately less secure.
>
> * Probably a better solution is to make all of your [order ...]
> links secure, with either form [process secure=1] or [area
> href=order arg="SKU" secure=1] or "AlwaysSecure order".
>
> * You should make sure your CookieDomain directive includes your
> secure domain.
Mike,
My customers all have their own certificates, but they still have weirdness
with AOL. Anything else you think I should try that won't open up gaping
security holes?
Eric
---
Eric Paul
SpellBook Systems
http://www.spellbook.net
-
To unsubscribe from the list, DO NOT REPLY to this message. Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list