RE: how to secure a commercial web site

["Levenglick, Jeff" <JLevenglick () fhlbatl com>]

Bilur,

You can buy your own cert server. (RSA Keon for example) 
At that point, you can create your own certs. (expire them when you want..ect)

Also..

You then have two options.

1) Pay a fee and have your cert server 'trusted' via Verisign or other CA's
or
2) Leave it 'private' and just provide your CA cert to the users so they will
trust you. (if you don't it will still work. They will just see a message about
trusting your site)


Jeffrey 
-----Original Message-----
From: info () biledge com [mailto:info () biledge com]
Sent: Tuesday, May 11, 2004 05:12 AM
To: webappsec () securityfocus com
Subject: how to secure a commercial web site


hi,
i am trying to secure -SSL certificated- a commercial web site without using verisign, global 
sign, etc. it seems there is a monopoly an i want to be out of it. does anyone know a better 
way to secure the web site or do i have to pay money, (even) for security ?   
regards, bilur


-----------------------------------------
This e-mail message is private and may contain confidential or privileged information.