Shared SSL revisited

[mresell]

Do I understand correctly that the only way to secure your cp as a reseller is for your host to have a shared cert?

If this is so can we get this. I am familiar w/ the ftp sub acct. idea on unix... would this work here?
Or is there no way to secure panel?
This seems like a very important issue. Any feedback here would be great.

[somereseller]

Forget about securing your cp for now.
There is no way to make it work as of today.

A secure cert is there for two reasons :
1) encrypt transactions
2) earn your customers trust by having it delivered by a third party that has verified your identity.

You may be able to get number 1 by using the Vortech's cert right now, but all your images will use your own cert and to be able to to that you even need a very expensive wildcard cert.
Obviously number two cannot be done right now...and note that a basic GeoTrust cert ($49) will never do it anyway

[vonbrocklin]

A couple methods for doing this have been outlined on the PSoft forums, but Matrix is waiting for PSoft to come up with a standard method. If I recall, there were all sorts of promises to hit a certain deadline but nothing every happened. Bottom line, I think there ARE ways to do this but it would depend on additional help from Matrix, and so far, their stance is they would rather wait for an official solution. Either way it is positively stunning that you can't secure an app that is DESIGNED to take credit card info. Unbelievable.

[somereseller]

I meant right here, right now, using our cp with the available settings

[admin]

We are going to test this out http://www.psoft.net/HSdocumentation/sysadmin/ssl.html

To see if we can get it to work for cp.youdoamin.com what your CP address should be any way..

Awesome =) If this works that will be great to be able to have customers sign themselves up. Thanks for giving it a try.

[somereseller]

I don't understand...your cp can already be reached through https, how will this procedure help us?

Right now the certificate is for cp.hsphere.cc so if my customer accesses it through cp.mydomain.com they get an error about the names not matching. That's what we're trying to resolve... if I understand right. =)

[somereseller]

My question was for admin

The procedure in the link describes how to secure the cp,but it was already done here, so I don't understand what's the new thing that will be tried by admin.