[Sussex] Switching from HTTP to HTTPS

[Nic James Ferrier]

"Brendan Whelan" <b_whelan at mistral.co.uk> writes:

> We have an Internet application written using PHP with a MySQL
> database. A small number of users login from around the UK and
> view/add/edit data via forms. The main user is becoming concerned
> about security and has asked can we switch from HTTP to HTTPS. I
> tried bringing up pages in HTTPS and get a message "This page
> contains both secure and nonsecure items". What needs changing to
> avoid these messages and, presumably make the whole application
> secure?

You need an SSL certificate installed on the server.

You can generate your own SSL certificate - but then your users will
have to understand and trust that process.

You can buy SSL certificates from organizations like Thawte and
Verisign.


You install the certificate into the server and make sure it is
protecting the bits of the namespace that your app is running under.


The process can be a bit complicated if you don't know what you're
doing.


-- 
Nic Ferrier
http://www.tapsellferrier.co.uk   for all your tapsell ferrier needs