Do you ever wonder? TODAY: Why I can’t have HTTPS on my web site?

I think this is not a properly asked question and a far better headline would be “What do I need to be able to use https instead of http for my web site?”. The answer to this question would be than this article :)

The black magic behind aka “the Intro”

As you may or may not know HTTP stands for Hyper Text Transfer Protocol and it’s the protocol you are using when trying to get to a web site. The web server serves HTTP requests and gives clients the proper web sites. The whole idea behind HTTP is, that it’s “plain text” and everything you send this way is not encrypted. All the data you put into a web site starting with HTTP is send “as is” and thus you could lend your password and username to anyone who would be spying on your network!

HTTPS stand for Hyper Text Transfer Protocol Secure and as you might think it is the safer “brother” of  the plain HTTP protocol. Everything you send trough a web site starting with HTTPS is send in an encrypted form and thus it is very complicated for a “man in the middle” to figure out what is the content of the message, but I have to say, that there are ways to find it out! But you can rest assured and as long as there is no “MITM” attack with a fake web site, than you should be secure, but always check if you are o the right web site, the web site authenticated in the reight way and a few more things ;)

What do I need to be able to use HTTPS?

To have the ability to use HTTPS instead of HTTP you need not only to get a web hosting account. You need some more things. First of all ou need to make sure your web host will allow you this feature. To use HTTPS you need to have  a static IP address assigned to your domain as you will need to buy a certificate from a  trusted certificated issuing authority like VeriSign. This certificate holds data about your web site and the IP address and more [this is why you need a static IP] and it ensures, that your visitors know who they are talking to while having a session  with your web site.

[ad#Adsense360]

A static address can be bought from your web host and it can cost you form $1 upwards and this fee is paid mostly on a monthly basis. Make sure to not get with this address on a “black list” as your host could be a little bit angry ;)

Another option is to buy a VPS or a dedicated server where you are assigned a dedicated static address and thus do not need to pay for it, but you have to look after the server yourself.

HTTPS – the requirements:

  • static IP address
  • certificate from a trusted authority [from $9.99 - $XXX XXX]

No related posts.

, , ,

Comments are closed.
Get Adobe Flash playerPlugin by wpburn.com wordpress themes