Secure SSL Transactions

This new page is a work in progress. Last updated Sep 31/97.

LiveZone servers support SSL-encrypted Web pages for high-security and online commerce applications. Your clients will be assured that they're dealing with your genuine Web site, and you'll know that your secure Web pages can't be read by anyone but you and your clients; encrypted Web pages can't be "hacked" as they pass across the Internet.

Our servers can support certificates from any current Certificate Authority (eg., Verisign and Thawte). We can help you obtain a new certificate, or install one you already have. Our multi-processor Web servers will ensure that security won't slow down your Web site.

Online Commerce

As for credit cards, our servers support SSL encrypted "secure" Web pages, so you're able to provide a secure front-end for your site. We can also configure the servers for eCash.

Although we accept credit cards payments from our clients, our credit card contract does not permit us to "factor" other companies' credit card charges. This means that you'll have to arrange either a credit card clearing-house or eCash account for your own business.

A typical LiveZone hosted Web site has the ability to use SSL for secure credit card entry into HTML forms. Clients can retrieve the order data themselves and process it using your manual system, or with programs such as IC-Verify, MacAuthorize, or PC-Authorize.

Clients can retrieve order details either using a secure Web page, with auto-forwarded email, or with encrypted email using products from PGP, Inc. Our servers have a PGP email encryption utility installed that clients may use to secure outgoing email.

Secure Web Pages

Web pages for use with SSL encryption are created and edited exactly like any other Web page. What makes a page "secure" is that instead of using http:// to reference the page, use https:// instead (note the extra letter 's' at the end).

For example, the test page installed in your Web site can be reached normally using the URL:
http://www.yourName.com/

To access the same page using SSL encryption, just enter the (slightly different) URL:
https://www.yourName.com/

We recommend using SSL pages only when necessary for things like credit card or other confidential information. SSL pages take longer for many browsers to display, and they require a lot more processing on the server.

You'll find more information on SSL certificates at the URL's below:
http://www.thawte.com/certs/server/contents.html
http://www.verisign.com/products/sites/index.html

These two vendors are widely recognized Certificate Authorities; other authorities also exist, and you can find them in the usual search engines. Both of these folks' certificates are automatically recognized by Netscape 3.0 and Explorer 3.0 and forward; although earlier browsers automatically recognize only the Verisign certificate, the Thawte certificate is secure, and a browser option lets people who care to make their browser learn about the Thawte authority.

Getting Secure at LiveZone

SSL is possible with any LiveZone hosted Web site that includes your own domain name. There is a small monthly premium for SSL capability, including a generous transfer allowance; additional transfer is available at additional cost. These charges reflect the significant incremental expense of providing SSL encryption and decryption for secure Web pages.

In addition, you'll need to obtain an SSL encryption "certificate" from a certificate authority (eg., Verisign or Thawte). Certificates require documentation of the link between your domain name and a legal entity such as a person or business, and cost from $100 to $400 per year (payable to the issuing authority).

We charge a setup fee for SSL over and above our regular Web site setup charges. This setup fee covers the cost of:

  • generating the CSR required for the Cerificate Authority's registration process (by default, we generate 1024-bit keys to ensure highly-secure encryption)
  • creating and installing a temporary certificate for use until your Certificate is issued
  • installation of your final Certificate when issued.

    • Getting It Together

    1. Setup your LiveZone Web site, indicating that you'd like SSL capability
    2. Provide us with the following information for your SSL Certificate. This information may appear to be redundant, but it permanently becomes part of the SSL Certificate that will be issued to you; it can not be changed without registering a new Cerificate.
    3. We will generate a CSR you will need to register your Certificate.
    4. We install a temporary certificate on your Web site (valid for 30 days) until your Certificate has been processed and returned to you by your Certificate Authority. Visitors encountering a secure page on your site with this temporary certificate will be warned by their browser, and asked if they wish to continue. Other than that, this is a real certificate.
    5. We email your CSR and instructions for you to submit your request to your chosen Certificate Authority.
    6. You will receive a notice from your Certificate when your application has been processed; we will install the Certificate on your Web site.

    Information Needed For CSR Creation

    Instructions for Thawte

    Now you can use your favorite web browser to connect to the Thawte certification center. Point the browser at http://www.thawte.com/certs/server/request.html to learn about interacting with Thawte for your certification needs.

    Cut and paste the following into the form at:
    https://www.thawte.com/cgi-bin/server/step1.sioux

    Thawte now offers technical support 24 hours a day, 5 days a week: http://www.thawte.com/support/contents.html


    www.livezone.com
    		    

    To SupportZone Main Page

    Last Updated January 2007
    Copyright (c) 1995-2007 by LiveZone Communications LLC. All rights reserved.
    WomenZone, BusinessZone, SupportZone are trademarks of LiveZone Communications, LLC.
    LiveZone is a registered trademark of LiveZone Communications, LLC.