crankyslap Posted October 20, 2011 Share Posted October 20, 2011 I am using apache2+mysql on Linux Debian 5 to store product keys for a vb.net program I made. What happens in the program is on of the following: 1. Bind the users computer ID to the product key they provided. (update x set computerid=computeridsent WHERE productkey=productkeysent) 2. Check if users computer ID matches the product key stored. (select productkey from x where computerid=computeridsent) Are there any security risks involved if I don't do this over SSL? I actually hardly know anything about it. Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/ Share on other sites More sharing options...
requinix Posted October 20, 2011 Share Posted October 20, 2011 Would it be bad if somebody got a hold of all the computer IDs and corresponding product keys? Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1280915 Share on other sites More sharing options...
crankyslap Posted October 20, 2011 Author Share Posted October 20, 2011 ID no, key yes. Do I need to pay for a certificate to send the requests over SSL? Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1280917 Share on other sites More sharing options...
requinix Posted October 20, 2011 Share Posted October 20, 2011 No, but self-signed certificates aren't as trustworthy (because anybody can make one). If it would Be Bad for somebody to discover the IDs+keys, and you can't trust that the connection itself is secure, then SSL is a good idea. Better safe than sorry. Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1280922 Share on other sites More sharing options...
geudrik Posted October 27, 2011 Share Posted October 27, 2011 1) I force SSL regardless of content. It helps me sleep better at night. 2) Class 1 CA's Certs are free - www.startssl.com Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1282570 Share on other sites More sharing options...
crankyslap Posted October 27, 2011 Author Share Posted October 27, 2011 Thanks Geudrik, did not know that. The project I was working on is pushed a bit into the background but I still want to do this. Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1282615 Share on other sites More sharing options...
geudrik Posted October 27, 2011 Share Posted October 27, 2011 Thanks Geudrik, did not know that. The project I was working on is pushed a bit into the background but I still want to do this. Glad I could help! Getting Apache configured properly after you've signed up / requested the certs can be a bit of a pain... if you need a hand, feel free to zip me a private message and I'll help ya out (though, I must admit I have a grand total of zero windows apache config experience...) Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1282652 Share on other sites More sharing options...
ZulfadlyAshBurn Posted October 27, 2011 Share Posted October 27, 2011 I have a local server at home which i tried installing SSL on it, kept failing. I don't know the cause of it. But nonetheless, i purchased a server with goddady and installed SSL on it. After coding, my server will push the content to the server ever hour. Piece of cake that way for me Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1282656 Share on other sites More sharing options...
geudrik Posted October 27, 2011 Share Posted October 27, 2011 That's one way to do it.. GoDaddy... *shudder* haha I'll stick to private servers crankyslap: If you could mark this topic as 'Solved' that'd be great, providing we've got your question answered to its fullest Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1282665 Share on other sites More sharing options...
ZulfadlyAshBurn Posted October 27, 2011 Share Posted October 27, 2011 That's one way to do it.. GoDaddy... *shudder* haha I'll stick to private servers LOL, why? Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1282669 Share on other sites More sharing options...
crankyslap Posted October 27, 2011 Author Share Posted October 27, 2011 Thanks Geudrik, did not know that. The project I was working on is pushed a bit into the background but I still want to do this. Glad I could help! Getting Apache configured properly after you've signed up / requested the certs can be a bit of a pain... if you need a hand, feel free to zip me a private message and I'll help ya out (though, I must admit I have a grand total of zero windows apache config experience...) Using Debian That's one way to do it.. GoDaddy... *shudder* haha I'll stick to private servers crankyslap: If you could mark this topic as 'Solved' that'd be great, providing we've got your question answered to its fullest I'll mark it solved because the main question has been answered. I don't like godaddy one bit either, or any shared host for that matter. VPS / Dedi ftw Link to comment https://forums.phpfreaks.com/topic/249476-do-i-need-ssl/#findComment-1282771 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.