Shuayb0:
You were right about the Diginotar incident, but SSL are not installed by users or visitor, that's the site owner's responsibility.

Businesses should understand that they need not wait for browsers to give users warning before protecting their web assets.

SSL is the internet equivalence of a driver's license. Truth is a site as big as Nairaland needs a Certum EV SSL.

uhmm maybe I didn't write it out well yes SSL is the job of the site to secure the assets the users is trying to access from prying eyes.

However that digitally signed certificate that contains the private keys of both the web server and the web client can be installed (I stand to be corrected).

The thing is most browsers already comes with these certificates pre-installed, but hackers can make you install certificates if you visit rogue sites.

Haven't you encountered that notification that says "this site certificate isn't trusted, click this to install bla bla".
That happens when the digitally signed certificate isn't recognised by the web browser , so the server presents its own certificate.

So that's that bro, users can install it.

even android phones can

Sir, this is how it works.

If you require a digitally signed certificate, you generate a CSR (Certificate Signing Request) from your web server, which comes with your server's private key.

All modern web browsers have Root Certificates of major Certificate Authorities.

After providing the CSR, your choice Certificate Authority provides an SSL, which contains a Digitally Signed certificate for your server, a root certificate and an Intermediate certificate, all these form a chain of certificates.

However, If after installing an SSL on your server (lets assume a rogue one), the web browser connecting to the server cannot recognize your root certificate or cannot match it with the one it has, then you get a warning. But if it's from a trusted CA you don't.

So what is existing in browsers isn't the actual certificate, but a root certificate of recognized CAs.

chukzyfcbb:

uhmm maybe I didn't write it out well yes SSL is the job of the site to secure the assets the users is trying to access from prying eyes.

However that digitally signed certificate that contains the private keys of both the web server and the web client can be installed (I stand to be corrected).

The thing is most browsers already comes with these certificates pre-installed, but hackers can make you install certificates if you visit rogue sites.

Haven't you encountered that notification that says "this site certificate isn't trusted, click this to install bla bla".
That happens when the digitally signed certificate isn't recognised by the web browser , so the server presents its own certificate.

So that's that bro, users can install it.

even android phones can

Is it a wordpress site or what kind of server environment was it installed on?

Obagoblog:
Pls, how do I automatically direct users that access my site with http to https(ssl)

Shuayb0:
Is it a wordpress site or what kind of server environment was it installed on?

Yeah... Wordpress site

Please install Really Simple SSL plugin, it will show you a prompt to click. After clicking, logout and login again, your traffic should be routed via https.

Obagoblog:

Yeah... Wordpress site

Shuayb0:
Sir, this is how it works.

If you require a digitally signed certificate, you generate a CSR (Certificate Signing Request) from your web server, which comes with your server's private key.

All modern web browsers have Root Certificates of major Certificate Authorities.

After providing the CSR, your choice Certificate Authority provides an SSL, which contains a Digitally Signed certificate for your server, a root certificate and an Intermediate certificate, all these form a chain of certificates.

However, If after installing an SSL on your server (lets assume a rogue one), the web browser connecting to the server cannot recognize your root certificate or cannot match it with the one it has, then you get a warning. But if it's from a trusted CA you don't.

So what is existing in browsers isn't the actual certificate, but a root certificate of recognized CAs.

yes you are correct, that was what I was tryna explain but I guess I wasn't detailed on that.

You are spot on

Shuayb0:
Please install Really Simple SSL plugin, it will show you a prompt to click. After clicking, logout and login again, your traffic should be routed via https.

Thank you.. I'll try it out

TechCapon:
SSL certification is free at least my new host gave me free of charge. Thank God I left hostgator. They charge you for everything.

brother, what is your new host?

Afrocentric:
brother, what is your new host?

namecheap

TechCapon:
namecheap

is it Nigerian hosting company?

Afrocentric:
is it Nigerian hosting company?

American.