Blogs

Forcing Visits to use SSL

Intro

Doesn’t matter whether it’s a CakePHP app for a client, your own personal CMS, or any other web based application. If your passing around passwords or other sensitive info you should really implement SSL. SSL provides 2 main perks to your visitors.

  • First it encrypts all communication that flies across the web. This prevents curious or devious billies from getting your secrets.
  • Secondly it ensures to the user that your server is in fact who it claims, and not a nasty ‘man in the middle" attack.
  • Finally it gives your site that touch of class…. which of course a classy person like yourself relies on.

Once you implement SSL certificates on your server you’ll want to require secure connections using Apache’s rewrite module. Now I won’t dwell on the creation and signing of certificates, its already well documented.  If your just starting out though,heres a few links I recommend;

January 1, 2009
Nifty tech tag lists from Wouter Beeftink