 | Help for "Security Certificate Warning" | |
If you're using Internet Explorer, click here for a certificate quick install. This will ask you twice if it is OK to install the ceritificate. Click "Yes" both times and you should be all set.
(The first time it asks if it's ok to even begin the install process, the second time it asks if it's ok to install the specific CACert certificate.)
For all other browsers (and IE too, but it takes more clicks), you can click here to install it from the CACert web site.
In Internet Explorer, the certificate "Thumbprint" will be: 135C EC36 F49C B8E9 3B1A B270 CD80 8846 76CE 8F33
If you saw a warning about being redirected , then that is your browser being noisy. There is a setting in your Internet Options to turn this off, if you really want to. This warning occurs because we switch you to secure https mode when you click the login button, then automatically switch back to http for the rest of the site. Your browser pops up the message to make sure you know that you are back in http mode. Rest assured that any time you view or change sensitive data, such as your password or credit card, we will switch you back to secure mode.
What is a Trusted Root Certificate?
A Trusted Root Certificate is a SSL
certificate
that various well known organizations (such as CACert, Verisign, etc...)
can use to sign some other certificate (or any other file, actually)
and indicate that the information in that certificate is accurate.
Each of these organizations has their own certificate, sometimes several.
They are called "Trusted Root" certificates because your browser is
configured to believe any signatures made using one of these certificates.
Why is this important?
We use a secure SSL connection during the login process to ensure
that your password cannot be viewed as it travels across the 'net.
As part of the process of creating a secure connection to our web
server, your browser needs to verify that the computer that it is talking
to is really our server, www.SwapSimple.com.
In order to prove this,we have a certificate that is signed by a Certificate Authority (CA) organization, using their Trusted Root Certificate. By signing the certificate, the Certificate Authority is saying that they have checked that we are who we say we are. If the browser knows the about the certificate of the CA, then it can check the signature on our server certificate and, in turn, verify that the web pages you receive are encrypted using our certificate and not someone elses.
Our certificate is issued and signed by CACert. Unfortunately many
browsers don't come configured with CACert's root certificate, so they
(correctly) issue warnings when visiting a site that uses CACert issued
certificates. The solution to the squelching warnings is simple:
install CACert's certificate.
How can I help?
You can submit a bug report to the people that make your browser.
Ask them to include the CACert root certificate in the standard
install of the web browser.
If you want some more information here are a few links:
END