Where to use SSL

should i use SSL on order history, login etc or just the credit card page

[kris_winter]

Ive stopped lurking and signed up so hello all.

I was wondering about where to use SSL.

Obviously its needed on credit card pages, but what are your feelings about its use on non sensitive but perhaps private data? For example contact details, order history, login information etc.

I notice some stores choose to make the members areas use SSL and others don't.

[jweighell]

I'd be interested to hear what people thing about this. My site uses WorldPay, which I redirect to for payment. This means that there is nothing secure on my site, however I do collect registration details.

[jam13]

I secure the entire checkout process (except the basket), and the customer login + account management pages. Basically anywhere that sensitive or personal details are entered or displayed.

My feeling is that it's unlikely to do any harm (apart from being slightly slower) and it might make the customer feel more secure.

[bufferzone]

IMHO you should do all you can to protect whatever information submitted by your customers to your site. Even if we talk about relative harmless information, you send out a signal about your concern for customer privacy and professionalism. Use SSL and other technologies to protect your customers, and use the fact that you do this in your marketing, it might set you apart from the competition

[jweighell]

Has anyone seen a change in conversion when they have moved to use SSL on all registration pages?

I'd like to, but I can't justify the cost/time to make the change.

[kris_winter]

Interesting point about using it to make your competitors look less concerned about privacy.
And i suppose if you dont do it you risk a competitor doing it to you. Thats a good enough reason for me.

[derekwong28]

We use Worldpay and have just installed an SSL certificate. I cannot see any significant changes in conversions. However, I know it does have some effect because we have had complaints from customers before about the lack of the lock icon on the browser.

[bufferzone]

It might also work with services like yahoo and some of the SE’s. As a sign of professionalism, helping acceptance and placement in these. I have no experience, data or documentation to back this up, just an idea

[stevenmusumeche]

You should secure your entire checkout. Personal information such as address and phone number can be just as useful to an identity theif as credit card information. There is really no reason NOT to secure your checkout. A secure certificate can be obtained for less than $100 and it's really not that hard to implement.

[lgn1]

I have secured the entire checkout process. I used
to just secure the credit card page, but some regulars
on this board convinced me, that it was best to secure
the entire process.

It made an insignificant change in my conversion rates,
but at least I am now complying with industry standard
privacy policy.