How can I purchase HTTPS in my web application?

Asked

Viewed 3,250 times

9

In this link I learned how HTTPS works: Stackoverflow - How HTTPS works

But I don’t know what applications I should use, and how to acquire HTTPS, depends on any host, programming language etc.

To detail more I say that, my application and charging defaulters created with PHP, Javascript, CSS and HTML.

2 answers

9


You should use in applications you need to protect the data you traffic. And only this data. Never use HTTPS for data that does not need to be protected as there is an extra cost to handle this data.

But understand that a lot needs to be protected. Remember that data can be manipulated along the way. HTTPS helps prevent them from being changed in this process without even being detected. So I’m not just talking about passwords or credit card numbers. Any information that is unacceptable that can be intercepted must be protected, even some that seem trivial. Imagine an altered address and the delivery goes to the wrong place. Even a simple age can make you show unsuitable content to people who cannot have access to it. Examples can be numerous.

HTTP is a protocol for transporting data typically between browsers and servers. Most of the things you do for web uses HTTP. And HTTPS is just a "safe" way to traffic this data. As you have read in the other question the data is trafficked encrypted.

Whenever someone does make one login in a website, it should be encrypted so the entered password would not be easily read if the data packets were captured improperly. Then you must use HTTPS.

If there are other data that should be protected, even if only to protect the privacy of those involved, it should use HTTPS.

All HTTP browsers and servers like Apache and IIS know how to handle this data traffic encrypted by the HTTPS protocol.

But not only that, you need a server-installed certificate to use the protocol correctly. This certificate must be purchased (there are free options with limitations) in a certifying authority (in English) that is recognized at least in the most used versions of browsers since they must also have a certificate to establish the communication. Those details are already in the other question.

Of course, for internal things, it is possible to generate your own certificate. It can be used for everything, but it will not be considered reliable outside of its internal use, which also needs to be configured to accept its own certificate.

The language itself does not need to know how to deal with the protocol. At least not to do trivial things. Of course, in some situations you may want to know how to deal with the protocol directly. But in general you only need to determine which protocol to use indicating when is HTTPS. So you don’t need to understand deeply how the protocol works to do the basics, you should just have your server configured correctly with a valid certificate.

Remember that if the page is HTTPS. All its content should also be.

Overall that’s it, of course there are some simplifications there. If you have more specific questions, post more specific questions.

4

First of all you cannot purchase the HTTPS. If you read the answer from @mgibsonbr in the question referred to it explains and poses the question as it is.

If you visit the Wiki you will read that:

HTTPS (Hyper Text Transfer Protocol Secure - secure hypertext transfer) is an implementation of the protocol HTTP over an additional layer of security that uses the protocol SSL/TLS. This additional layer allows data to be transmitted by means of an encrypted connection server and client authenticity through certificates digital. The standard TCP port for the HTTPS protocol is 443.

Having said that, I think you want to know how to purchase an SSL certificate and refer you to a new read to the same answer, however I would recommend contacting your hosting service therefore it will certainly have a response more according to the specifications of the service you use.

The installation on the server and consequent use is nothing complicated, and once again your provider hosting will certainly help you. The installation will depend a lot on the system you use but nowadays there are already solutions that allow you to do it in a very intuitive way.

Browser other questions tagged

You are not signed in. Login or sign up in order to post.