Your own branded subdomain over HTTPS

Every VICIfast dialer arrives on its own branded subdomain with a valid HTTPS certificate already issued. Agents log in to a clean URL, not a raw IP address with a browser warning.

A real address, not an IP

Stock VICIdial installs often live at a bare IP. That works, but it looks unfinished and most browsers flag the login page as insecure. VICIfast gives you a Branded subdomain instead — a friendly hostname your team and your agents can trust. The dialer answers on that name, and so does the admin screen.

Behind that name we create a DNS record and request a certificate automatically. The login page, the agent screen, and the Webphone all load over HTTPS. There is nothing for you to copy-paste and no certificate file to babysit.

How the certificate gets issued

We issue certificates through Let's Encrypt using a DNS-01 challenge. Instead of exposing a port to prove ownership, the deploy worker writes a temporary DNS record that the certificate authority checks. Once it confirms the record, the cert is signed and installed on your box.

sequenceDiagram
  participant W as Deploy worker
  participant D as DNS
  participant CA as Let's Encrypt
  W->>CA: Request cert for subdomain
  CA-->>W: Provide DNS-01 token
  W->>D: Write TXT record
  CA->>D: Verify TXT record
  CA-->>W: Sign certificate
  W->>W: Install cert on your box

This DNS-01 path is why your dialer can serve HTTPS within the same under-40-seconds Provisioning window. The challenge runs against DNS, so we never have to wait on inbound firewall rules or open extra ports to get a valid cert.

TLS for SIP too

The same certificate backs encrypted signaling. With SIP over TLS enabled, your Softphone registers over an encrypted channel rather than plain SIP (Session Initiation Protocol), so credentials and call setup are not sent in the clear over the public internet.

• Agents see a trusted padlock, not a scary warning page.
• The web admin, agent screen, and API all share one valid hostname.
• Renewal runs on its own — you never wake up to an expired cert.

Encrypted signaling pairs naturally with encrypted media. Once the registration handshake is protected, you can turn on secure RTP so the audio of each call is encrypted on the wire too. For a remote team scattered across home connections and coffee-shop networks, that is the difference between call setup details traveling in the open and traveling sealed.

DNS stays under control

Your subdomain points straight at your box. We keep DNS in a plain, predictable state — the record resolves directly to your server's IP, with no proxy sitting in the middle. That matters for a dialer because a proxy layer can mangle client IP addresses, and your Carrier needs to see the real source address for IP authentication to work.

A clean DNS record also keeps SIP and RTP traffic on a direct path. There is nothing in between to add latency or drop media packets, so call quality reflects your box and your network rather than a routing layer you cannot tune.

Where VICIfast fits

A trusted address and working HTTPS are part of the polish we add on top of plain VICIdial — see what VICIfast adds to VICIdial. If you want a dialer that ships with a real name and a real certificate from the first login, check our pricing to get started.