Re: SSL Certificate Question

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 02/16/2014 09:01 AM, Tedd Sperling wrote: > > So, if you do not have a SSL Certificate then you cannot have > HTTPS communication -- is that your claim? > On the client side all you need is a browser that knows how to handle SSL certification. On the http server side, you must have a SSL certificate to provide secure connections; that is how the protocol works. The SSL certificate may be self-signed meaning that you trust yourself but no one else may be so sanguine. Or you may purchase a certificate that is signed by a trusted third party who has (presumably) done due diligence to verify the claims of your application. From <http://en.wikipedia.org/wiki/Certificate_authority>: "The digital certificate certifies the ownership of a public key by the named subject of the certificate." There is no assumption of identification. - -- James Moe moe dot james at sohnen-moe dot com 520.743.3936 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlMBMbMACgkQzTcr8Prq0ZP10QCgh6ADetR1lHeHsDYqTVwyD8tf gRoAnRU5gpwWKDY5Bv7cq2EoeGRgMI2r =t5OG -----END PGP SIGNATURE-----