|
When you connect to a secure web server all information sent
between your browser and the web server is encrypted. This means
that other people can't intercept it and read it. MindSpring
offers the Stronghold secure server for use with Web Hosting accounts.
This document describes how to get your web site set up to utilize
secure connections.
Stronghold is a Virtual Secure Server. If you wish to serve
a document or call a CGI script securely, simply change the beginning
of the URL from http:// to https://
However, unless you have purchased a secure server certificate
for your web site, viewers will receive a warning message that looks
something like this:
The certificate that the site 'help.mindspring.com' has
presented does not contain the correct site name. It is possible,
though unlikely, that someone may be trying to intercept your communication
with this site.If you suspect the certificate shown below does not
belong to the site you are connecting with, please cancel the connection
and notify the site administrator.
The error message then gives the viewer the option to
Cancel the connection, or
Continue opening the page.
This error message means that though the data from your web
site is being encrypted, there is no secure server certificate present
that proves that the site they are looking at is actually your site.
When viewing any web page there is a remote possibility that someone
has intercepted a request for a web page and has sent a bogus page
in place of your web page. Purchasing a secure certificate removes
this possibility, and keeps the warning message from appearing on
visitor's screens.
A
secure certificate ensures that the web site you are connecting to is really
owned by the company you think it is owned by, and that that company
really exists (that is, it has a business license or other formal documentation
proving that it's a real company).
Secure certificates are issued by third party "certificate
authorities" such as Thawte or Verisign. When you purchase a certificate
from Thawte or Verisign, they verify that you own the site you are
purchasing a certificate for, and that you are who you say you are.
The name of your company is encrypted into the certificate they
issue. When someone visits a secure page on your site, the visitor's
web browser checks the certificate against the "root certificate"
for Thawte that is part of their web browser. If all goes well,
then your customer will see the familiar lock or key come together,
indicating that the web page they are viewing is secure.
If a valid certificate for your web site is not installed,
then your visitor's web browser will show an error message
if they try to load a web page on your site securely. Depending
on their browser and its settings, the browser may not let them
view the page at all.
To Get a Secure Server Certificate
Decide on the hostname you will be using for your secure
site. Certificates are only valid for one hostname. A hostname is
the Server Address in the URL. For example - in the URL
https://frontpage.mspring.net/
,
the hostname is
frontpage.mspring.net
. For
most customers, the hostname will simply be
www.yourdomain.com
.
If you try to use the secure server on the wrong hostname, visitor's
will receive a warning from their browser.
If you have several domains pointing to one Web Hosting space you should
decide on the hostname to use for the secure server. Make sure that
all links to the secure areas of your web site reference the secure
hostname that you choose.
Take a look at MindSpring's introduction to
Thawte and Verisign by clicking on the links at the bottom of this
page.
When you have chosen the certificate authority that
best fits your needs, follow the link to the enrollment form at
the end of the introduction page.
Once you have filled out and submitted the form, our
Business Services group will begin processing your request. You
will receive e-mail correspondence with instructions on how to proceed
from that point. Read the messages you receive very carefully. Be
sure to follow all instructions exactly to avoid delay in the issuance
of your certificate.
For more information on the secure certificates that are offerred
by MindSpring, see the following pages:
https://commerce.mindspring.com/thawtein.htm
|
