On a site with an expired certificate, is data still encrypted (where the "https" is used)? I've done some searching the topic and have not come away with a clear answer.
\\// Robert
The grass is always greener on the other side -- but that's because they use more manure.
andy206uk posted this at 08:50—6th February 2007.
He has: 1,742 posts
Joined: Jul 2002
Hi
Yes... all the certificate does is 'guarantee' that the security is genuine, it doesn't actually encrypt the data, that's done by your server. You can actually create self-signed certificates which work perfectly, although your users will get a warning in their web browser. You only really need a proper certificate if the site is live as many people won't order if the cert is out of date/expired due to the browser warnings.
Andyk
Music Rants News and Reviews | My Photoblog | Blog of a Web Designer
Give a man a fish and you feed him for a day. Teach him to use the Net and he won't bother you for weeks.