Apache and SSL

[sukishan]

Apache and SSL
Mobily suggests that the use of SSL improves Apache security somewhat -- and he offers a caveat on the use of self-signed certificates.

"A self-signed certificate will still allow companies to encrypt the connection; so, in a way, they are still good. What they don't do is tell the customer that the identity of the company is verified by a trusted institution or company," he said. "I'm not sure I'd use them in a production server, because you can obtain a certificate quite cheaply now, and (more importantly) because Web users shouldn't be trained to say "yes" to dialog boxes that appear in front of them while they browse."