I am not looking for the best security money can by. I won't be running that kind of site - just a reasonable level such that a hacker might have to do a little bit of work to break it. There does not appear to be many options that lay between SSL/Certificates (i.e. lots of money) and basically no security what-so-ever (I would include .htaccess using the basic method among these). The idea of a shared certificate is interesting, but there are warnings about the certificate not matching the site which would become annoying. I'm simply looking for a method between no-security at all and the SSL/Paid-Certificates method. Let me try to make it more clear through this analogy. Let's say you own a home and aren't particularly worried about getting robbed, because you live in a good neighborhood, however, you don't want to make it so easy such that someone can just walk on in and take your TV. Odds are you aren't going to be interested in paying for a high-tech security system which will keep out all but the most sophisticated thief, nor are you going to be interested in just leaving your door open. In this case, a decent deadbolt lock will work just fine. It will stop the average moron from just strolling on in. It requires that the thief be knowledgeable about how to pick locks and if the thief istrulyy motivated, sure, they would be able to get in without any trouble. I'm simply looking for a decent deadbolt to secure my site with. Now, as for the suggestion, it would be wonderful if the Mozilla group could provide this kind of functionality. As I understand it, Apache can be extended and that would likely be necessary as well. As I see it, it would provide a significant difference between what Mozilla/Apache would be able to do and what IE would be capable of and since this kind of functionality is desired by many web designers who don't need the kind of security that SSL/Paid-Certificates etc. provide, it just might be adopted. Of course, if it became popular, IE, etc. would follow and then everyone would benefit, but Mozilla would have the head start. -- == Eric Gorr ===== http://home.cox.rr.com/ericgorr ===== ICQ:9293199 === "Therefore the considerations of the intelligent always include both benefit and harm." - Sun Tzu == Insults, like violence, are the last refuge of the incompetent... ===
