Certificates security procedure

[toplisek]

I like to set secure login but like to know if there is some reference(article) what are benefits of one certificate.


Example: if user make a name mismatch error it can be secured login. Is there any suggestion, help.

[coopster]

Do you mean a domain name mismatch? If so, you could redirect them first to the canonical domain.

[rocknbil]

Since this is the PHP forum,

// loginscript.php
if (! isset($_SERVER{'HTTPS'}) or ! ($_SERVER{'HTTPS'} == 'on')) {
header("https://example.com/loginscript.php");
}

Generally you'd handle this at the server level with mod_rewrite or something similar, but that will work.

what are benefits of one certificate.

Not very clear, but the obvious,
- Data to and from the server is encrypted and very difficult to snoop in a port scan
- a single cert is less expensive than a wildcard (multi domain) cert
- visitors are often more comfortable knowing their actions are encrypted and some attempt is made to protect their input

Wikipedia will probably be more helpful if you want an article.