|
Home > Archive > IIS Server Security > November 2004 > certificates
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| Jordan 2004-11-28, 5:49 pm |
| Hello,
Question, what is the TRUE purpose of having a
certificate for a website? just to prove the
authenticity? saying this is the REAL site?
Regards,
Jordan
| |
| Miha Pihler 2004-11-28, 5:49 pm |
| Hi Jordan,
There are usually at least two reasons. One if what you described -- server
authentication. E.g. I really want to know that I am talking to Microsoft
server when I am downloading patches; or I really want to know that I am
talking to my on-line bank server when I am entering data to access my
account information.
The other purpose is to encrypt the data that is exchanged between the
server and the client. I don't want people to listen in on my conversation
when I am sending information from my computer to bank server -- or when
bank server replies with information.
There are also client side certificates. They are used to authenticate users
to web server. This way server knows who it is talking to (since I am the
only one who is supposed to have the private keys).
I hope this helps,
Mike
"Jordan" <anonymous@discussions.microsoft.com> wrote in message
news:989601c4d59c$8dd72c40$a401280a@phx.gbl...
> Hello,
>
> Question, what is the TRUE purpose of having a
> certificate for a website? just to prove the
> authenticity? saying this is the REAL site?
>
> Regards,
> Jordan
>
| |
| Jordan 2004-11-28, 5:49 pm |
| Thanks for the reply, where can I find more information
regarding how to set this up on some of my websites?
Regards,
Jordan
>-----Original Message-----
>Hi Jordan,
>
>There are usually at least two reasons. One if what you
described -- server
>authentication. E.g. I really want to know that I am
talking to Microsoft
>server when I am downloading patches; or I really want
to know that I am
>talking to my on-line bank server when I am entering
data to access my
>account information.
>
>The other purpose is to encrypt the data that is
exchanged between the
>server and the client. I don't want people to listen in
on my conversation
>when I am sending information from my computer to bank
server -- or when
>bank server replies with information.
>
>There are also client side certificates. They are used
to authenticate users
>to web server. This way server knows who it is talking
to (since I am the
>only one who is supposed to have the private keys).
>
>I hope this helps,
>
>Mike
>
>"Jordan" <anonymous@discussions.microsoft.com> wrote in
message
>news:989601c4d59c$8dd72c40$a401280a@phx.gbl...
>
>
>.
>
| |
|
|
|
|
|