ebenson
Oct 29 2003, 10:21 AM
Looked around, and I think I know the answer (NO) but I just wondered if anyone else could make the GeoTrust SSL little javascript button pop up if I just type in my address without the www part.
On their sites, not mind, although you can try if you like.
Thanks.
adminguy
Oct 29 2003, 10:49 AM
It's not really possible since and SSL cert specifies and absolute domain name, like "www.mystore.com" or "shop.mystore.com". Because of the nature of the security trust, if the root absolute domain name is not exactly the same, a warning is thrown which for the most part makes the SSL coverage unable to 100% ensure validity of the certificate for the domain in question.
There are workarounds, but really they are a little convoluted when compared to the "just make sure they end up/stay in the domain your cert is for" approach...I don't want to get into too many details but it would entail 2 SSL certs, one for the www. and non www. domain name, on two separate ips, etc, etc. Ultimately as I mentioned, it's more of a mess than it's worth.
joshpearson
Oct 30 2003, 10:15 AM
What you should do is write a simple javascript that detects if a user went to the non-www site. If they did, then automatically redirect them to your www page. It would be super easy to write.