This is related only to laracasts/laravel only in the sense that the hosted site runs from it! So apologies about the left field question.
Websites sometimes have text/icon, sometimes placed in the footer, that they have or run a 'secure server'. I was wondering if you know where I can find some criteria or give me some insight as to what makes a 'secure server', and at what point I can claim to be using one.
I.e. I don't want to get into any trouble if I mention we run a secure server, which is in truth not so secure (not that i'm using or creating a server that is less secure, I'm referring to naivety only!).
Any guidance much appreciated!
Er, not really sure what this "secure server" thing is but if you're talking about websites that have a valid SSL cert and say it's "secure" then, yes. In my eyes, there's no such thing as a 100% secure server. Using SSL is good to encrypt data transferred via the server and a browser.
Got any examples?
D'you mean like this? https://ssl.comodo.com/site-seal.php
I bought an SSL certificate from these guys the other day and they emailed me saying that I qualify to use this "site seal" on my site because they deem it secure (which I assume is just because I use their certificate)
Yeah, those "secure server" icons look childish and unprofessional. "Look! We managed to make it secure after all! Promise!" - oh, come on!
@bashy, try an images search with something like 'secure website icon' and you'll see what I'm getting at.
I agree they are never the best looking images to include on your website!! I'm certainly not looking to add one to mine. I thought they would generally indicate a 'standard' of sorts, but after further research, it would appear you can make 'secure' claims just by having an ssl certificate (sometimes not even that!)
I'm going to use an ssl certificate on my site. I don't think I'll be holding payment details.. but maybe I could look at FCA regulations (I think that's the correct governing-body) and see what measures they require a website to have when holding user bank/credit card information.
Thanks for writing back!
No waiiittt, ignore that FCA thing.
I think this is the kind of thing I've been looking for: https://www.pcisecuritystandards.org/security_standards/documents.php
Please or to participate in this conversation.