Thanks Ian,
I guess by your answer you are quiet knowledgable with https servers. I'm still trying to understand the theory behind using one and trying to see what i can or cant do. I have a question for you...
Can I use an https server without certificates? I have read that this would be pointless. However, when you go to amazon and order something you get transferred to a https server - but i didnt provide a certificate? I know the reason is to encrypt your credit card details - but what advantages would i get by having https on a normal webserver - the only thing i need to encrypt is the password to certain areas of the web. I use LDAP to authenticate - so if i use https and authLDAP then is the password encrypted? or do i need LDAPS? in which case what is the difference between using http and LDAPS and https and LDAPS? any advice would be welcome
cheers ian
jim