gary-rowe / multibit-merchant

⚠️ OBSOLETE. DO NOT USE! A free and open source Bitcoin ecommerce platform, with several representative clients (online shop, admin etc). Uses Dropwizard, HAL, MongoDB etc
http://multibit.org
Other
150 stars 50 forks source link

Research low cost certificate for HTTPS #55

Closed gary-rowe closed 12 years ago

gary-rowe commented 12 years ago

It is necessary to provide a fully secured SSL experience to avoid a MITM using an attack vector between where HTTP redirects to HTTPS.

In order to obtain a low-cost but well trusted SSL certificate it will be necessary to locate an alternative to the usual suspects like VeriSign and Thawte. StartSSL may provide a good starting point.