Re: Subject: [cobalt-users] SSL

[Alfredo <alfredo@xxxxxxxxxxxxxxx>]

> The Cobalt
> manual talks about self signing the certificate which I've done, and 
> now the admin login is over a secure conection, but is it worth
> having it externally signed.

Depends on what you want to do with it, Justin.

SSL authorization does two things: 1 -- it enables a highly secure 
(128 bit) connection (that's the ssl part) and 2 -- it tells people 
visiting your site through that connection that you are who you say 
you are (that is the certificate authorization part).

If you're going to use the ssl for business purposes (credit cards 
and stuff) you definitely need an authorized cert -- it's kind of a 
"business license" and it makes a HUGE difference to customers 
psychologically because it's also a very real proof that you're legit.

If you're using this ONLY to protect access administratively, then 
you can probably just use your self-signed cert. But that's about the 
extent of its usefulness, in my opinion.

Alfredo
--
People-Link/Institute for Mass Communications
www.people-link.org
Communications for a Better World...and for the People Who are Building One!
Members, Local 1180, Communications Workers of America, AFL-CIO