[ic] SSL Certificate

Jonathan Melhuish interchange-users@icdevgroup.org
Mon Feb 10 18:01:04 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 10 Feb 2003 10:33 pm, Andre Bunting wrote:
> Hi all..
>
> I got a problem here... I don't know exactly which SSL certificate to
> purchase... Since Verisign , Thawte and InstantSSL have multiple options
> for Accepting online-payments.. I don't know which one would work with
> IC.

Any!  SSL encryption is handled by your web server (eg. within Apache), so 
Interchange doesn't have much to do with it.  That's assuming you don't mean 
"realtime online transaction processing", which is a whole different kettle 
of fish (and something that I am not familiar with).

> The site I am working on, will do maybe a large volume of sales or huge
> volume of funds. So I want to know which is best for me.

There are only three differences between SSL certs, apart from the price:

*  Encryption level - go for 128-bit, I'm not sure anybody offers 56-bit any 
more

*  Browser compatibility - some older browsers will pop up warning messages 
with the newer certificate authorities.  Check before you buy.

*  The level of "buyer protection" they offer.  This in no way affects the 
level of security of the data being transmitted, it's just that some 
companies check more details than others, and provide a certain level of 
financial assurance that you are who you say you are.

For the record, I'm using an GeoTrust QuickSSL 128-bit cert, which seems to do 
the trick, although I dare say there are many other equally good products on 
the market.  http://products.geotrust.com/index.html

Cheers,

Jon
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+SCrZeTVvFHAhe5cRAqeJAJ45iC5yUke7Rp57CYnglGvBU4l2pQCghJsj
Lu2STajTbDDDIZVKw6dEQI0=
=y1i5
-----END PGP SIGNATURE-----