SSL Secure

[privateb]

Hi guys,

Do you think it is worth us paying out for additional SSL security such as VeriSign?

 

[OliviaSSLGuru]

It all depends upon your site. If it has anything to do with online transactions, then a security is recommended. The level of security also depends on the type of transactions that are carried out. If its a simple individual site, and securing your customers' information is all you want to do, then you can go for some cheap ssl certificates. Otherwise, to retain your customers, you should opt for a good security service.

 

[smo]

Ultimately customers dont care who your SSL comes from, so long as they get the padlock on their browser when paying.

We use SSL from our hosting providers, i believe its QuickSSL which comes from Geotrust who are big players.

Paying for a premium certificate wont really gain you anything extra, they all provide the same level of security, the only bonus for the expensive ones are green browser bars and fancy extras, even our cheap ones come with security seals which you click on to verify its genuine!

 

[GotLiveChat]

The only cert I could see getting is the EV type. Using this type of SSL cert causes some of the latest web browsers to highlight the browser bar when they visit an EV SSL site.

More of a gimmick than anything else, but the purpose of using SSL is to provide security and enhance confidence in your site.

 

[Optegris]

The only cert I could see getting is the EV type. Using this type of SSL cert causes some of the latest web browsers to highlight the browser bar when they visit an EV SSL site.

More of a gimmick than anything else, but the purpose of using SSL is to provide security and enhance confidence in your site.

It goes some way beyond just a green bar, it takes a considerable amount of time for the certificate to be even issued due to the amount of extra checks the site and company has to go through. Unfortunately many consumers don't appreciate the difference between a domain/organisation validated certificate.

It's horses for courses though, some of our site just use a basic SSL cert, our main site uses an EV cert simply down to the level/value of transactions it processes...

 

[andygambles]

The VeriSign certs also come with then Site Seal which shows up in Bing and Google searches (if you run AVG) and can therefore give you some search engine boost for those users.

Also include a daily malware scan of your website. Plus as has been mentioned provide the green address bar technology. This can add a good degree of legitimacy to your website depending on what you sell.

I happen to know a place where you can get all these things for a very big discount .

 

[Martfox Hosting UK]

Hi guys,

Do you think it is worth us paying out for additional SSL security such as VeriSign?

If your customers (or any site users) have to fill out some forms with their personal details, you should have a SSL certificate installed on your hosting account.

 

[ecenica]

Hi guys,

Do you think it is worth us paying out for additional SSL security such as VeriSign?

Yes. SSL certificates with a recognised site seal are worth paying extra for as they are an inexpensive way of boosting user trust in a website.

I believe we sell Verisign SSLs with SiteSeal for around £50 per year.

Feel free to PM me if you have any questions.

Rich

 

[OliviaSSLGuru]

Ultimately customers dont care who your SSL comes from, so long as they get the padlock on their browser when paying.

Paying for a premium certificate wont really gain you anything extra, they all provide the same level of security, the only bonus for the expensive ones are green browser bars and fancy extras, even our cheap ones come with security seals which you click on to verify its genuine!

Things are not the same nowadays. Customers do understand the difference between ssl certificates, and especially the ones which shows the green address bar. Even there are self signed certs, which can be created all by yourself, without the need for any CA.
The bottomline is that you can't consider your customers as fools if you want some sales/benefits from them.

 

[andygambles]

I believe we sell Verisign SSLs with SiteSeal for around £50 per year.

Feel free to PM me if you have any questions.

Rich

£50 per year for a VeriSign SSL with Site Seal? Which one. I am very interested if you really can do this price. Could save me a few £100k

 

[smo]

Things are not the same nowadays. Customers do understand the difference between ssl certificates, and especially the ones which shows the green address bar. Even there are self signed certs, which can be created all by yourself, without the need for any CA.
The bottomline is that you can't consider your customers as fools if you want some sales/benefits from them.

I bet that 90% of my customers couldnt tell you what a browser is, let alone an SSL or the differences between them.

Dont credit the wider public with specialist techy knowledge about such things, they want their goods, they want to see the padlock, beyond that they really dont care or dont know enough to understand.

 

[andygambles]

Dont credit the wider public with specialist techy knowledge about such things, they want their goods, they want to see the padlock, beyond that they really dont care or dont know enough to understand.

The padlock is disappearing from FireFox and I predict other browsers too in the future. Therefore EV certificates may become much more desirable to highlight security to end users.

 

[Martfox Hosting UK]

I bet that 90% of my customers couldnt tell you what a browser is, let alone an SSL or the differences between them.

Dont credit the wider public with specialist techy knowledge about such things, they want their goods, they want to see the padlock, beyond that they really dont care or dont know enough to understand.

Hi smo,

do you want to say, that sending of credit card details through an UNSECUR connection is a good idea you can offer to your customers? I don't think so...

 

[smo]

Hi smo,

do you want to say, that sending of credit card details through an UNSECUR connection is a good idea you can offer to your customers? I don't think so...

Where did you spout that rubbish from???

I've at no point said SSL are bad or advocated the processing of payments without one, ive simply said customers are rarely techy enough to know the difference between a basic SSL and an all singing all dancing one - nor do they care!

 

[microdragon]

There is not any secure difference between SSL, all are 128bit or 256bit. The expensive SSL are insured with high value, just like you pay insurance.

 

[Martfox Hosting UK]

There is not any secure difference between SSL, all are 128bit or 256bit. The expensive SSL are insured with high value, just like you pay insurance.

The price of a SSL certificate will be created by:

1. Brand

2. and if the certificate is unchained or chained

Unchained SSL Certificates are certificates that are signed directly by a trusted root certificate (which comes embedded in most web browsers). Normal SSL certificates use what is a called a chain certificate or an Intermediate certificate to link your certificate to a trusted root certificate.

Chained Certificates are more secure

Using chain/Intermediate certificates is the better option because it provides greater security. This is because the private key of the signing certificate must be present on any server that creates certificates. If a root certificate's private key is on a accessible server, that server must be protected extremely well. If the private key is compromised, it becomes worthless as do all the certificates that were issued by it. Other the other hand, if an Intermediate certificate is compromised but the root certificate's key is safely stored away, a new Intermediate certificate can be generated and new certificates can be issued off of it. Chain certificates also provide the advantage of smaller CRL files that can make a site load faster.

All major web browsers and servers support chain certificates and installation simply requires putting the extra intermediate certificate on the server/device. There are a few devices that do not support chain certificates and there are some situations where unchained certificates are much easier to implement.

 

[andygambles]

All certificates are now chained under new SSL guidelines. There are no unchained SSL certificates.

 

[Martfox Hosting UK]

All certificates are now chained under new SSL guidelines. There are no unchained SSL certificates.

That's right. On July 22nd, 2010 GeoTrust upgraded its root hierachy to 2048bit RSA Keys, but I don't know about the small providers if they do follow...

 

[JennyGW]

Hi guys,

Do you think it is worth us paying out for additional SSL security such as VeriSign?

You could also consider an iFrames integration offered by payments gateways such as Paypal and Moneybookers.

Your shoppers experience would be that they have never left your site to make payment as the payment happens within an iframe within your own page. The content of the iframe is supplied by the gateway vendor. The iframe does not even need to carry any branding by the gateway vendor making the integration seamless.

If you would like further information, feel free to PM me.

Jenny