crankyslap Posted October 20, 2011 Share Posted October 20, 2011 I am using apache2+mysql on Linux Debian 5 to store product keys for a vb.net program I made. What happens in the program is on of the following: 1. Bind the users computer ID to the product key they provided. (update x set computerid=computeridsent WHERE productkey=productkeysent) 2. Check if users computer ID matches the product key stored. (select productkey from x where computerid=computeridsent) Are there any security risks involved if I don't do this over SSL? I actually hardly know anything about it. Quote Link to comment Share on other sites More sharing options...
requinix Posted October 20, 2011 Share Posted October 20, 2011 Would it be bad if somebody got a hold of all the computer IDs and corresponding product keys? Quote Link to comment Share on other sites More sharing options...
crankyslap Posted October 20, 2011 Author Share Posted October 20, 2011 ID no, key yes. Do I need to pay for a certificate to send the requests over SSL? Quote Link to comment Share on other sites More sharing options...
requinix Posted October 20, 2011 Share Posted October 20, 2011 No, but self-signed certificates aren't as trustworthy (because anybody can make one). If it would Be Bad for somebody to discover the IDs+keys, and you can't trust that the connection itself is secure, then SSL is a good idea. Better safe than sorry. Quote Link to comment Share on other sites More sharing options...
geudrik Posted October 27, 2011 Share Posted October 27, 2011 1) I force SSL regardless of content. It helps me sleep better at night. 2) Class 1 CA's Certs are free - www.startssl.com Quote Link to comment Share on other sites More sharing options...
crankyslap Posted October 27, 2011 Author Share Posted October 27, 2011 Thanks Geudrik, did not know that. The project I was working on is pushed a bit into the background but I still want to do this. Quote Link to comment Share on other sites More sharing options...
geudrik Posted October 27, 2011 Share Posted October 27, 2011 Thanks Geudrik, did not know that. The project I was working on is pushed a bit into the background but I still want to do this. Glad I could help! Getting Apache configured properly after you've signed up / requested the certs can be a bit of a pain... if you need a hand, feel free to zip me a private message and I'll help ya out (though, I must admit I have a grand total of zero windows apache config experience...) Quote Link to comment Share on other sites More sharing options...
ZulfadlyAshBurn Posted October 27, 2011 Share Posted October 27, 2011 I have a local server at home which i tried installing SSL on it, kept failing. I don't know the cause of it. But nonetheless, i purchased a server with goddady and installed SSL on it. After coding, my server will push the content to the server ever hour. Piece of cake that way for me Quote Link to comment Share on other sites More sharing options...
geudrik Posted October 27, 2011 Share Posted October 27, 2011 That's one way to do it.. GoDaddy... *shudder* haha I'll stick to private servers crankyslap: If you could mark this topic as 'Solved' that'd be great, providing we've got your question answered to its fullest Quote Link to comment Share on other sites More sharing options...
ZulfadlyAshBurn Posted October 27, 2011 Share Posted October 27, 2011 That's one way to do it.. GoDaddy... *shudder* haha I'll stick to private servers LOL, why? Quote Link to comment Share on other sites More sharing options...
crankyslap Posted October 27, 2011 Author Share Posted October 27, 2011 Thanks Geudrik, did not know that. The project I was working on is pushed a bit into the background but I still want to do this. Glad I could help! Getting Apache configured properly after you've signed up / requested the certs can be a bit of a pain... if you need a hand, feel free to zip me a private message and I'll help ya out (though, I must admit I have a grand total of zero windows apache config experience...) Using Debian That's one way to do it.. GoDaddy... *shudder* haha I'll stick to private servers crankyslap: If you could mark this topic as 'Solved' that'd be great, providing we've got your question answered to its fullest I'll mark it solved because the main question has been answered. I don't like godaddy one bit either, or any shared host for that matter. VPS / Dedi ftw Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.