Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

implementing SSL Help!!!

0 views
Skip to first unread message

David Nguyen

unread,
Dec 14, 1999, 3:00:00 AM12/14/99
to
I have no idea on how to implement SSL and would appreciate any help I can
get, including links, suggestions, finger pointing, rumors, lies (well maybe
not lies). Anything would be appreciated.


David Nguyen


Zev

unread,
Dec 14, 1999, 3:00:00 AM12/14/99
to
It is a real pain in the ass. I just finished doing so for two clients. You
will need to be the administrative contact on the domain and you will need a
D-U-N-S number from http://www.dnb.com (Dun & Bradstreet). If you go to
http://www.verisign.com you can start applying for the SSL. Hint: Make sure
the name of the company, the registrant of the domain, and the name specified in
IIS all match exaclty. Another thing instead on specifying US Company as a
category on the Verisign site you should specify Online Merchant.... believe ME
it will make your life easier!!!!!

Greg Hayes/Raxco Software

unread,
Dec 14, 1999, 3:00:00 AM12/14/99
to

I had a REAL Pain-in-the-xxx time with IE 3.0 on NT 4.0. Ended up having to
download a hotfix and doing stuff from the command line. All because I was
using 128bit security. I don't know if this process is easier/harder under
Win2k though.

- Greg

Zev wrote in message <3856A1E1...@zev.zev>...

Zev

unread,
Dec 14, 1999, 3:00:00 AM12/14/99
to
As painful as it is... it is easier in W2K.

David Nguyen

unread,
Dec 14, 1999, 3:00:00 AM12/14/99
to
Thanks for the replies, I have one more question. Is IIS able to do secure
transactions (ex credit card info) without having third party
company/programs invovled? And where would I find the info to set it up?
Something like HTTPS?

David Nguyen

Emídio Cunha

unread,
Dec 15, 1999, 3:00:00 AM12/15/99
to

"Zev" <z...@zev.zev> wrote in message news:3856A1E1...@zev.zev...

> It is a real pain in the ass. I just finished doing so for two clients.
You
> will need to be the administrative contact on the domain and you will need
a
> D-U-N-S number from http://www.dnb.com (Dun & Bradstreet). If you go to
> http://www.verisign.com you can start applying for the SSL. Hint: Make
sure

Isn't there any other company that issues these certificates?

Zev

unread,
Dec 15, 1999, 3:00:00 AM12/15/99
to
Dun & Bradstreet's D-U-N-S is really the only accepted proof of business I could
find but SSLs can be purchased through Verio or Verisign.

Kevin D. Allen

unread,
Dec 28, 1999, 3:00:00 AM12/28/99
to
Is IS able to do so, but it is not something I would recommend. Since IIS
4, you can set yourself up as a certificate authority. Issue your own
certificate.

Here's why you usually wouldn't want to do this for credit-card transactions
from an on-line store...

Your users' browsers are preloaded with certificate authority info.
Hitting your ssl site their browser will immediately give them an error
message to the effect that the issuer of the certificate is an unrecognized
authority.
(Under MS IE, at least, they have the option of adding the new authority at
this point).

At this point, your average user is going to bounce from your site to go
shop elsewhere...
( for an example of what this will do, try going to this address:
https://secure.csnsys.com )


If cost for a certificate is a concern, check out THAWTE,
http://www.thawte.com
They're less than 1/2 the price Verisign charges, and they're legit... about
35% or so of the e-commerce sites on the net use them now.

Where issuing your own certificates is a cool idea is working within your
own company or with established business contacts to set up secure
communications on one of your sites. In other words, you already have some
sort of a "trust relationship" established with the user at the other end,
where they would be comfortable with the idea of trusting you as a
certificate authority.

"David Nguyen" <futur...@earthlink.net> wrote in message
news:e$pRzmoR$GA....@cppssbbsa02.microsoft.com...

Kevin D. Allen

unread,
Dec 28, 1999, 3:00:00 AM12/28/99
to
You DO NOT have to be the administrative contact on the domain, and you DO
NOT have to have a D-U-N-S number.
( Sure, it helps, but not required)
I have set up several where I am the technical contact on the domain, and
there was no D-U-N-S number. D-U-N-S speeds up authentication, that's all.
The last setup I did was with THAWTE, and I was tech contact on the domain,
and had no DUNS for the company. It still was set up much faster than I was
with Verisign on my last account that had a DUNS number...
And Thawte did it for $125.00!


"Emídio Cunha" <emi...@janeladigital.com> wrote in message
news:#C9az2qR$GA.221@cppssbbsa04...

David

unread,
Feb 10, 2000, 3:00:00 AM2/10/00
to
ema...@farsideoftheweb.com (Kevin D. Allen) wrote in
<#SrT3iXU$GA.258@cppssbbsa04>:

So if you have a merchant that does your transaction processing. You need
to do what? Setup a certificate for authority? If so could somen one give
me a step by step to set this up

thanks
dave

0 new messages