Mobile devices and SSL

Recently at a forum.joomla.org, it was raised a question: why it is not possible to visit a site through SSL-connection with the mobile device (really a question was another ;-) ). At the same time, all was ОК with a usual (desktop) browser.

After some experiments and search on the Internet I have understood, that the reason of such behavior can be only one: the majority of mobile devices contain only a few basic “root certificates” and not download other from the Internet.

On a site, where the problem was, the certificate from GoDaddy was used.

Currently I don’t know what certificates are installed on each mobile device. Some phones have the menu “Authority Certificates” or “Certif. Management” in which supported certificates are listed. The only thing that I found in this direction is the comment on a site concerning an Openwave browser:

For Openwave browsers, the CA is either installed in the gateway or pre-installed in the phone. You don’t need to download the CA to the phone. What you need is to install a proper CA in your web server. The details are as follows:

Browser version 4.x and 5.x support Verisign, Thawte and RSA

Browser version 6.1 and 6.2 support
• CyberTrust
• Certicom
• Diversinet
• Entrust
• GlobalSign
• VeriSign

So, if you want to use SSL-connection on the site (for example, for sales), the best way is to buy the certificate from Verisign (but it costs $399 per year).

Related Posts

You can follow any responses to this entry through the RSS 2.0 feed.

Leave a Reply