Do I really need an SSL certificate

[clairemarie]

I have an e-commerce site, we don't take payments on the site as we use a payment gateway.
I have an SSL certificate on the login and cart page - but do I really need it?

Can anyone shed any light on this? Am I paying for a service I don't really need?

Many thanks

 

[zigojacko]

It's highly advisable because one of either two scenarios will occur:-

1. You serve your checkout pages on non secure (http instead of https) pages and without a padlock in browser, customers will see that your checkout isn't secure and may not buy from you.
2. You serve your checkout pages as https but with no valid SSL certificate, all visitors will receive a great big red/yellow warning in their browser warning them that the page they are on is not secure and they may not buy from you.

They will be able to proceed past the warning and still checkout but it's quite likely that this will put a number of visitors off and they will leave and shop elsewhere.

 

[amphis software]

without a SSL certificate on the Login page, usernames and passwords will be sent as plain text which means hackers could steal those user details

Tom

 

[HostLoveUK]

It is likely that the SSL is required to highlight to your website visitors that your webpage is secure for payment gateway processes - I would recommend having this on your website. It is all down to your customers and what experience you wish them to have when they use/visit your webpage - without the SSL they may lack confidence in their purchase and go elsewhere.

 

[ryedale]

How much are you paying for your SSL at the moment?

 

[nahosting]

It is all about making your users feel secure. Often they don't know you and your business and a SSL certificate helps to reassure them. This also increases conversion rates. An extended validation certificate is the most obvious of them (giving you the green bar) and your business has to be validated by the certificate provider to get these certificates.
Also without an SSL certificate on your login page the usernames and passwords will not be encrypted between the browser and web server.

 

[clairemarie]

Thanks all for the replies. I had a feeling it was more to do with customer confidence than actually doing much. I will continue using it, as it seems the general feeling is that customer like to see it.

ryedale - i'm currently paying £65 per year

 

[RepricerExpress]

Well worth the £65—as mentioned, it's more about the browser alerting customers to the non-secure pages and most users won't even read those error messages, they'll just see warnings and steer clear of your site.

 

[ryedale]

You can get the basic level SSL for as little as £6 per year from somewhere like namecheap but it depends on your hosting set up really and whether you are paying for a unique ip address as well as part of the price.

 

[antropy]

Yep, for £65/year definitely worth keeping.

 

[CodePaper]

I strongly recommend to use SSL certificate on your webiste. Customers are very security-conscious and is right to fear submitting payment or personal details over a website that is not secured. The purpose of SSL is to keep the trust of your online buyers. Better security means more sales and better business in general.

 

[crossting]

I was considering buying a SSL for my business site and this topic made my decision!

 

[MilesWeb]

An SSL certificate is important! The modern customers are educated about the website security and they are aware that the https shows that an SSL certificate is installed in the website and then they consider the website safe for entering their personal details and critical information. It is extremely important to have an SSL certificate.

 

[EUWindowsHost]

An SSL certificate is important! The modern customers are educated about the website security and they are aware that the https shows that an SSL certificate is installed in the website and then they consider the website safe for entering their personal details and critical information. It is extremely important to have an SSL certificate.

That's right, SSL is very important. SSL makes your customers feel safe when purchase goods/service from you. It is very important to have SSL on your site.

 

[nnrocks]

It's highly advisable because one of either two scenarios will occur:-

1. You serve your checkout pages on non secure (http instead of https) pages and without a padlock in browser, customers will see that your checkout isn't secure and may not buy from you.
2. You serve your checkout pages as https but with no valid SSL certificate, all visitors will receive a great big red/yellow warning in their browser warning them that the page they are on is not secure and they may not buy from you.

They will be able to proceed past the warning and still checkout but it's quite likely that this will put a number of visitors off and they will leave and shop elsewhere.

Nice information, I would like to add my thoughts in these. Ssl security secures data transmission between two channels. If your end (your website) isn't secured, then it may be a victim of man in middle attack, which can be intercept all the data provided by your clients.

 

[Clodbuster]

I must admit I don't look at the top of a checkout page to see if it is locked but do on the payment pages - invariably a separate outside payment processor. Am I alone in this or do the majority not see it as an issue?

 

[nnrocks]

I must admit I don't look at the top of a checkout page to see if it is locked but do on the payment pages - invariably a separate outside payment processor. Am I alone in this or do the majority not see it as an issue?

You should look at address bar before paying for anything online. Your details can be stuck by hacker if you not look so.

 

[Clodbuster]

All they can get is my name and address, you can get that quite legally from the voters roll, telephone directory, DVLA . On the payment page I do check but invariably that is world pay, sage or other payment provider.

 

[zigojacko]

All they can get is my name and address, you can get that quite legally from the voters roll, telephone directory, DVLA . On the payment page I do check but invariably that is world pay, sage or other payment provider.

But many ecommerce websites actually host their payment form on their own server/domain/website. In these instances, there's more than just your name and address that can be stolen.

 

[Clodbuster]

But many ecommerce websites actually host their payment form on their own server/domain/website. In these instances, there's more than just your name and address that can be stolen.

You are right - perhaps I'll look

 

[branddesignexperts]

SSL certificates make your customer comfortable while shopping from the website.

Also Google support SSL for the ranking signal.

 

[Laura Cioclea]

When you should use an SSL certificate:
1. You store credit card info.
2. Your site asks for personal info (login& password), otherwise hackers can see the data in clear text.
3. Many customers are fearful of fraud, so an SSL certificate will make them feel safe.