x
all questions login
General DNS & Domains Dyn Email Update Clients Dyn Developer

I'm setting up a store on my Spring Server. I have the site built, but I want to make sure my customers' information is secured on the way to the server. I'm running Apache. What else do I need to do?

more ▼

asked Dec 31 at 03:43 PM

cvonwallenstein\'s gravatar image

cvonwallenstein ♦♦
427 30 44 57

10|600 characters needed characters left

2 answers:

To ensure your users information is protected when communicating with them you will want to use SSL encryption on your server. The first step to doing this is to purchase an SSL Certificate which http://DynDNS.com offers. For instructions on creating an SSL certificate you can read through our How To article on the subject. https://www.dyndns.com/services/sslcert/howto.html

You will also need to install and configure your server with SSL as well. Apache has documentation on setting up the SSL Module here. http://httpd.apache.org/docs/2.2/ssl/

DynDNS also has their own instructions you can read through for another perspective. https://www.dyndns.com/services/sslcert/install.html

more ▼

answered Dec 31 at 04:01 PM

lhynes\'s gravatar image

lhynes ♦
116 4 7 11

10|600 characters needed characters left

At an absolute minimum you need both an SSL certificate and to configure Apache to require SSL for the relevant pages. General information about SSL in Apache is here. At a minimum the following will be required in your httpd.conf (the exact location of this will vary according to your distribution, but it's probably under either /etc/httpd or /etc/apache or something very similar):

<Location /my/cart/path>

SSLRequireSSL

</Location>

Assuming your site is http://www.example.com then this will force access to anything starting with http://www.example.com/my/cart/path to be done over SSL. Note that there may be legal requirements on if or how you store the data you receive (such as credit card numbers). Make sure you understand both the legal situation where you live and in the USA since this is where the server is hosted.

more ▼

answered Dec 31 at 03:59 PM

Cry Havok\'s gravatar image

Cry Havok ♦
52.2k 13 26 222

Further, it's worth saying that it's critical to keep all patches and updates applied to the system in a timely manner. This reduces the chance that somebody will compromise your server and gain access to the information that way.

Dec 31 at 08:52 PM Cry Havok ♦
10|600 characters needed characters left
Your answer
osqa.question.ask.tags.preview.show

© 1998-2012  Dynamic Network Services Inc.  -  Legal Notices  -  Privacy Policy  -  Contacts     

Powered by AnswerHub - Enterprise Social Q&A