Why should I use a secure certificate?
A secure SSL certificate gives customers confidence in your identity
and reliability. Offering SSL security adds credibility to your online
business and demonstrates a willingness to protect customer information
and privacy.
The high encryption involved with SSL ensures that credit card info
and any other confidential information remains absolutely confidential.
SSL is also used to keep project developement and research protected.
What is a Secure Certificate ?
A secure certificate guarantees the visitor that the site owner is
a legitimate business and not just a visitor to a cyber cafe. With
a secure certificate installed on a domain, standard browsers can
use secure encrypted mode.
How do I get a Secure set-up ?
Step 1. You need your own legitimate domain web space (a subdirectory
on geocities won't do)
Step 2. You need a real address. (A box number in Las Vegas
and a hotmail address is not good enough)
Step 3. You need some proof of being legitmate and not just
some crook who occasionally visits a cyber cafe.
To proove the legitimacy of your business you need these documents:
For a Home Based Business:
- You need a copy of a verifyable business license that has your
street address on it. If your company is not a sole proprietorship
you also need a copy of your incorporation papers.
- A letter from the president or owner of your business authorizing
that the business gets a Secure Certificate, and that we can make
reasonable checks to verify that the business is legitimate. This
ensures that nobody else gets a certificate with your good name
to use for their unauthorized purposes.
- A phone number where you can be reached.
Fax these papers to us at (403) 995-6554.
For Partnerships and Incorporated businesses you need:
- copy of a verifyable business license that has the street address
of your business on it.
- A copy of your incorporation and or partnership papers.
- A letter from the president or owner of your business authorizing
that the business gets a Secure Certificate, and that we can make
reasonable checks to verify that the business is legitimate. This
ensures that nobody else gets a certificate with your good name
to use for their unauthorized purposes.
- A phone number where you can be reached.
Fax these papers to us at (403) 995-6554.
Step 4. You have to order your secure certificate on the Secure
Insider's Store
It takes a few days to complete all the checks. The procedure is
very thorough to ensure that only real and legitimate businesses get
the secure certificate.
If you have any questions, feel free to write
or call us at (403) 995-6545.
Can I get in on a server wide secure deal ?
Hitch-hiking along on somebody elses certificate works against you
because all new browsers will detect that and warn the visitors. On
Webby we only use real Thawte certificates that certify that that
particular business is legitimate. We do not recognize or allow mall
style certificates.
What is SSL ?
The SSL (Secure Sockets Layer) Handshake Protocol [Hic95] was developed
by Netscape Communications Corporation to provide security and privacy
over the Internet. The protocol supports server and client authentication.
The SSL protocol is application independent, allowing protocols like
HTTP (HyperText Transfer Protocol), FTP (File Transfer Protocol),
and Telnet to be layered on
top of it transparently. The SSL protocol is able to negotiate encryption
keys as well as authenticate the server before data is exchanged by
the higher-level application. The SSL protocol maintains the security
and integrity of the transmission channel by using encryption, authentication
and message authentication codes.
The SSL Handshake Protocol consists of two phases: server authentication
and an optional client authentication. In the first phase, the server,
in response to a client's request, sends its ertificate and its cipher
preferences. The client then generates a master key, which it encrypts
with the server's public key, and transmits the encrypted master key
to the server. The server recovers the master key and authenticates
itself to the client by returning a message authenticated with the
master key. Subsequent data is encrypted and authenticated with keys
derived from this master key. In the optional second phase, the server
sends a challenge to the client. The client authenticates itself to
the server by returning the client's digital signature on the challenge,
as well as its public-key certificate.
ALERT
If you received a phony postcard pick-up notice, claiming to be from a family member, or other vague source, then that is just an illegal spoof and NOT from us.
Just like Elvis, Ebay and PayPal, we too suffer from impersonators. Such is the price
of fame.
Mypostcards.com sells postcard SOFTWARE, but does NOT send postcards.
Do not click on anything in the spoof. Just dump it.
Since your spoof did not come from us, we can not unsubscribe you from anything.
You can send the spoof to the Spamcops at
http://www.spamcop.net/
They will analyze it and show you where it really came from.
How to recognize a spoof |
|