SSL Certificates

[joe1182]

Does anyone have any tips on using a SSL Certificate? Do you make your whole site SSL or do you just encrypt the pages like client login and payments? Was this hard to setup? I am looking into going with Thawte or GoDaddy and one is cheaper. Does anyone have any experience with either of these? Would you go with them again? Why? Thanks for any help.

[Corey Bryant]

Check out ev1servers.net - you can get a discounted SSL there.

As far as encrypting - online encrypt the pages that need it. If you encrypt them all - it might slow your site down some.

Usually the login pages are encrpyted and definitely the page that accepts the CC information. I would encrypt any page that the user enters personal information

-Corey

[joe1182]

Thanks

[UltraCartJohn]

Hi Joe,

We use InstantSSL certificates provided by Comodo Group. They are very inexpensive, and have a terrific browser footprint.

As for encrypting everything, that is typically unnecessary. Some of our merchants choose to encrypt the View Cart page, but most do not.

The important thing is to encrypt every page where your customer is to provide any order information.

Send me a message if you have any other questions.

John

[edited by: lorax at 8:02 pm (utc) on May 10, 2005]
[edit reason] delinked - No URLs please [/edit]

[Rugles]

Thawte is ok. It is the second company I have dealt with and both worked fine. Very little to it when you get everthing up and working.

To your other question, I like to see every page that has personal or financial info with an https page.

[meg8]

Does anybody know where I can get a comprehensive description of installing an SSL. At the moment I feel very stuck between istantssl and my hosting company?

I guess I'd love to know if there's any way of installing the SSL without direct access to the server, ie by uploading it, and also about how you inform it which pages to encrypt.

I've been trying to do this for about three weeks now and have come through what I thought was understanding back into complete ignorance. I really don't know how it will fit together with the rest of my site or how it works or anything and would love to be able to find out.

Thanks

[abertone]

Why not use the solution your host provides?

-ABertone

[meg8]

As it turns out my hosts have decided to become really quite helpful and install a cheap one for me. Theirs was between 500 and 1000GBP depending on who I spoke to!

I was more looking for a reference guide type entry on the whole subject, I have searched in vain, because I know that an SSL will help reassure my customers but, that's all I know and I was just wondering what I was acually installing on my site.

[swones]

I don't work for ev1servers or anything but I notice that they now also do the Geotrust SSL Premium cert as well for a lot less that elsewhere. Think I'll upgrade to that when my standard one is up for renewal as you get the flashy live trust logo!

Simon.

[vacorama]

i just bought the Verisign SSL. Was a painful and scary purchase at 1K, but after two months i can see it paying for itself quickly.. If you get a decent amount of traffic you will definitely find that small group of people who trust your site enough to buy only when they see a logo they recognize from larger sites. all depends on what your selling i guess. I sell high end vacuum so a lot of my customers are in their 40's and 50's and verisign is all they know..

[vacorama]

i just bought the Verisign SSL. Was a painful and scary purchase at 1K, but after two months i can see it paying for itself quickly.. If you get a decent amount of traffic you will definitely find that small group of people who trust your site enough to buy only when they see a logo they recognize from larger sites. all depends on what your selling i guess. I sell high end vacuum so a lot of my customers are in their 40's and 50's and verisign is all they know..

[sborder]

At one time I used Verisign but got tired of the high prices and all of the hoops they make you jump through.

The average customer doesn't care if its Verisign. All they want is that little lock in the corner of the browser.

I now use ev1servers.net, I had my ssl cert in about 15 minutes and it was way less time consuming and cheaper and easier than Verisign. I think I paid 50.00 for a year.

Verisign does not have to make the process that difficult to get a cert.. But then that's how they justify their super high price level.

Just think it wasn't that long ago that many people went to Network Solutions to get and manager a domain name and it was 35.00 per year. Now with a little competition from godaddy and others domain names are down to 6 or 8.00 instead. (but not on Network Solutions)

Personally I would never use Verisign again.
Or Network Solutions of that matter. LOL

Never had one question or complaint about the GeoTrust cert from ev1 and our site does almost 1 mil per year.

just my biased opinion :-)

steve

[otc_cmnn]

We just bought a one year cert from godaddy for $30.

No need to pay a K. As long as you make it clear that the site is secure (By simply Stating so Often and Boldly!)

Customers will feel comfortable.