Bob pointed out that ssl keys require all 3 parts of a domain name. In your example, the parts are "buy.entrust.net". If someone started at www.entrust.net or just entrust.net, the browser would consider buy.entrust.net to be a new domain and would issue a new session cookie.
Bob, thanks for the clarification of my muddled attempt.
Stefan
At 09:01 AM 9/5/2003 -0400, you wrote:
Here's a link to one of my client's certificates: https://buy.entrust.net/secure-tpl/securityseal.cfm?ID=0000A909-EAAB-1D81-B8DD80A9B0ACFF70-25780
There's no www in the https domain.
Rick
> Ok, granted there is a wild-card *.domain.com version of SSL keys that > the major corps usually get, but it's typically not the case with sites. > And I didn't mean to say that SSL keys required "WWW" but rather that > Verisign and the like require host.domain.com (all 3 parts), Apple's key > is specifically for STORE.apple.com, but my scenario holds true for any > hostname. > > Robert > > -----Original Message----- > From: Dan Stein [mailto:[EMAIL PROTECTED] > Sent: Friday, September 05, 2003 5:15 AM > To: [EMAIL PROTECTED] > Subject: Re: Witango-Talk: Critical Issue > > Does not seem true at all unless there is some redirect going on I just > typed https into my browser window and of the 8 recent site visits like > that > 3 come back without www. > > They are etrade and apple store to name a few. > > Dan > > on 9/5/03 5:53, Robert Shubert at [EMAIL PROTECTED] wrote: > > > The scenario is that you have a website at domain.com (pseudonym of > > www.domain.com) and you have an SSL key of https://www.domain.com. SSL > > keys require the "www" or hostname, whereas most websites treat the > > "www" as optional. > > -- > Dan Stein > Digital Software Solutions > 799 Evergreen Circle > Telford PA 18969 > Land: 215-799-0192 > Mobile: 610-256-2843 > Fax 413-410-9682 > FMP, WiTango, EDI,SQL 2000 > [EMAIL PROTECTED] > www.dss-db.com > > > ________________________________________________________________________ > TO UNSUBSCRIBE: Go to http://www.witango.com/maillist.taf > > > ________________________________________________________________________ > TO UNSUBSCRIBE: Go to http://www.witango.com/maillist.taf >
________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/maillist.taf
========================================================
Database WebWorks: Dynamic web sites through database integration
http://www.DatabaseWebWorks.com
________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/maillist.taf
