Question

For the online e-commerce site that you created for Zeus Books, pages created Home, About, Products, Login, Contact, create a report in a Microsoft Word document answering the following:

Identify the web pages that you would secure using SSL.

State reasons why the web pages you have identified should be secure.

Which Certificate Authority (CA) would you suggest for Zeus and why?

Which type of SSL/TLS certification would you recommend from that vendor and why?

Are there any disadvantages of using SSL/TLS on all the Zeus web pages? Discuss.

Answer 1

Q1) State reasons why the web pages you have identified should be secure

1. ?Data Transfer of Customer related information needs to be secured so that nobody know what data or passwords have been entered by him.
2. If there is any Bank Transaction/Currency related information are being transferred for approval from respective Banking Authority, these critical data needs not only to be enctypted but also secured so that nobody gets a chance to decrypt the data by any means possible.
3. Protect Customer Fundamental rights and uphold privacy.

Q2) Which Certificate Authority (CA) would you suggest for Zeus and why?

CA:- A certificate authority (CA) is a trusted entity that issues electronic documents that verify a digital entity’s identity on the Internet. The electronic documents, which are called digital certificates, are an essential part of secure communication and play an important part in the public key infrastructure (PKI)

I would recommend Digi-Sign CA for Zeus because:-

1. International recognition
2. Strong partner programme
3. Latest technology
4. The most scaleable
5. Faster to install
6. Easier to maintain
7. Overall best value for money

Q3) Which type of SSL/TLS certification would you recommend from that vendor and why?

1. Single Domain Certificates - A single domain certificate allows a customer to secure one Fully Qualified Domain Name on a single certificate. For example, a certificate purchased for www.domain.com will allow customers to secure any and all pages on www.domain.com/. Single domain certificates are available in DV, OV and EV variants at a variety of price points and warranty levels. The straightforward nature of the single domain certificate makes it ideal for small to medium sized businesses managing a limited number of websites
2. Wildcard SSL Certificate - A Wildcard certificates allows businesses to secure a single domain and unlimited sub-domains of that domain. For example, a wildcard certificate for '*.domain.com' could also be used to secure 'payments.domain.com', 'login.domain.com, 'anything-else.domain.com' etc. A wildcard certificate will automatically secure any sub-domains that a business adds in the future. They also help simplify management processes by reducing the number of certificates that need to be tracked.

3. Unified Communications Certificate (UCC): - Unified Communications Certificates are specifically designed to secure Microsoft® Exchange and Office Communications environments. UC certificates use the Subject Alternative Name (SAN) field to allow customers to include up to 100 domains on a single certificate - eliminating the need for different IP addresses per website that would be required otherwise

Q4) Are there any disadvantages of using SSL/TLS on all the Zeus web pages? Discuss. - YES

1. Page Loading Time will increase drastically as the web page needs to decrypt the encrypted data and convert it back to normal form to be displayed on the web page. This will increase the Page Loading Time.
2. Network RTT time will increase significantly.
3. On slower networks web pages will hang as RTT (Round Trip Transmissions) will be increasing

Please let me know in case of any clarifications required. Thanks!