Security Issues

[Back to FAQ Table of Contents]

			Can we install a GeoTrust secure certificate notice on our web site?
	We encourage you to install the GeoTrust True Site seal to promote your web site security. Install this 3 line script in the location you would like the icon to appear - Remember, since the icon will only show up for the exact domain listed by our wildcard CybrHost certificate, you must be using our certificate and the URL must be https://your_domain.cybrhost.com... <!-- GeoTrust True Site[tm] Smart Icon tag. Do not edit. --> <SCRIPT LANGUAGE="JavaScript" TYPE="text/javascript" SRC="//smarticon.geotrust.com/si.js"></SCRIPT> <!-- end GeoTrust Smart Icon tag --> This is the GeoTrust True Site seal: For FrontPage2000 installation instructions please see Install True Site Seal.

			What browsers does your wildcard GeoTrust certificate support?
	GeoTrust supports the following browsers: AOL Browser 6.x AOL Browser 7.x Microsoft Internet Explorer 5.01+ Microsoft Internet Explorer 6.x Netscape Navigator 4.51x Netscape Navigator 6.x Opera 5

			How do I block people from my web site using an IP address or domain name?
	The .htaccess file provides the ability for information protection on the Stronghold server. It can also provide you with considerable control. In the cases of the question above, you can very easily restrict access to your web pages by adding a few lines of code to a .htaccess file. If you know the visitors IP address or FQDN (fully qualified domain name) you can add the following within your root .htaccess file (/html/.htaccess): Order deny,allow Allow from All # Only deny requests from this host. Try "Deny from .mydomain.com" to # restrict access. Deny from server058.cybrhost.com Deny from 127.0.0.1 Deny from 63.74.15.251 The domain name and IP addresses above are merely examples and must be replaced with either the domain name or individual IP addresses you wish to restrict.

			Why can't my WebTV clients obtain a secure link when checking out?
	The GeoTrust wildcard certificate supplied by CybrHost does not support Web TV during SSL sessions. The browsers supported by GeoTrust are stated at GeoTrust Browsers above. If WebTV clients are mandatory to your business about the only real solution is for you to buy either a Thawte or VeriSign certificate. The pricing for these certificates is $449 (Thawte 128-bit) and either $349 (VeriSign 40-bit) or $895 (VeriSign 128-bit) per year. For typical ecommerce operations a 40-bit certificate provides adequate security. For more information on these certificates please see either Thawte SSL Certificates or VeriSign SSL Certificates.

			What business documentation is required by the SSL vendors?
	Thawte Please download Thawtes Step by Step Guide to Enrolling for a Thawte Digital Certificate with easy to follow instructions on how to accomplish each of the steps above. Step By Step Enrolment Guide - SSLSGC (PDF). VeriSign Before VeriSign can issue your Server ID, we need to know that your organization has the legal right to conduct business under the name you specify in your enrollment request.Ê With your enrollment request, you must submit "Proof of Right" documentation that demonstrates your right to use the name specified the request. The simplest way for you to provide proof of right documentation is to give us your Dun & Bradstreet D-U-N-S number. Almost all established organizations in the US and abroad already have D-U-N-S numbers. Your ID will be issued several days sooner if you use a D-U-N-S numbers. For 2-day turn around guarantee your DUNs number must be active. If you are submitting a request for a Server ID for a business and do not have a D-U-N-S number, you must fax a copy of one of the following documents to VeriSign: Articles of Incorporation Business License Fictitious Business License (Articles/Cert of Incorp, Amendments to same, Fictitious Business Statement or DBA) must be the copy filed with a government office/agency with an official stamp, seal, signature, or control number upon it. Documents not in English must also be accompanied by a translation done by an accredited translation service.) If you are submitting a request for a Server ID for a government organization or agency and do not have a D-U-N-S number, you must fax a copy of one of the following documents to VeriSign: The Act or Charter (or specific page within) that establishes the organization within the government. For example, if the organization in the Server ID request is "National Gallery of Art", you would submit a copy of the Act of March 24, 1937 by the Joint Resolution of Congress. If you are submitting a request for a Server ID for a university and do not have a D-U-N-S number, you must fax a copy of one of the following documents to VeriSign: Articles of Incorporation. (Many domestic Universities are incorporated). Write your domain name on the selected document and fax it to VeriSign at 650-961-8870. Your Server ID request cannot be processed until we receive this proof of right documentation.