Web application product shows "Not secure" warning on browsers

46 Views Asked by At

I am working on a web application product that is to be distributed to several clients. Now everything was fine as long as customers used localhost but when they used the server IP to access web application's password page, Chrome and other browsers started showing "Not secure" on the title. I know about self signing but I am sure that it is not the possible solution for web product where every user will have to create signing authority and setup the signature or at lease create signing authority.

1

There are 1 best solutions below

2
On

If the server certificate is self-signed is not responsibility of the user to create anything. The server must be configured to use a CA signed certificate that the browser will be able to verify it's identity.

Browsers pre-trust many known CA root certificates. If your web application has a server certificate signed by a known CA, the user will not receive any errors in the browser, since it will be able to verify the application's own identity.

There are plenty of resources online explaining how to create a CSR and get it signed by a CA (it may involve extra costs).