Get Updates (It's FREE)

Results 1 to 10 of 10

Thread: Which SSL?

  1. #1
    (4) Ferrari theBiz's Avatar
    Joined
    Jul 2009
    Locale
    NJ
    Posts
    869
    Thanks
    191
    Thx'd 270 times in 166 Posts

    Default Which SSL?

    Hi can anyone give me some inside info on why and which SSL certificate to use? Regarding the actual security which ones are good? I need it for sensitive info not CC's.

    Obviously Verisign is an obvious but i just can not see spending hundreds of dollars for what others are offering at much less. Any experiences and opinions would be appreciated.
    "Ask me for anything," said Napoleon to his lieutenant. "Anything but time."

  2. #2
    (5) Porsche JamesF's Avatar
    Joined
    May 2009
    Locale
    Nashville, TN
    Age
    27
    Posts
    577
    Thanks
    55
    Thx'd 414 times in 193 Posts

    Default

    I've always just used GoDaddy's using a Google'd up coupon code I found; usually for about $12.99.

    I think for the most part, SSLs all work the same in encryption; I'd worry more about how the database authentication, encryption, XSS, SQL injection, and authorization works to me.
    Need your website made? Find and hire a freelance web designer/developer at Freelancify.com (my own Fastlane startup, so please support!)

  3. The Following User Says Thank You to JamesF For This Useful Post:

    theBiz (Feb 5th, 2012)

  4. #3
    (4) Ferrari theBiz's Avatar
    Joined
    Jul 2009
    Locale
    NJ
    Posts
    869
    Thanks
    191
    Thx'd 270 times in 166 Posts

    Default

    Yeah im asking for reasons like that, if someone really knows about SSL's and how they work, id love an honest opinion rather than the affiliates making fake SSL rating sites ive been reading. Judging by industry prices id figure you would have t spend at least 100 bucks to get something that youd be happy with overall but again i do not have the experience, so waiting on an SSL experiences person, thank you.


    James, just checked out your site.. very cool looks like its getting some real activity already... why do you not put the SSL cert there to make people feel better? You have it you might as well display it dont you think... many people dont know what https means.
    "Ask me for anything," said Napoleon to his lieutenant. "Anything but time."

  5. #4
    (5) Porsche JamesF's Avatar
    Joined
    May 2009
    Locale
    Nashville, TN
    Age
    27
    Posts
    577
    Thanks
    55
    Thx'd 414 times in 193 Posts

    Default

    No prob. The SSL is really just used to encrypt data so when it's transferred, it's not in "plain site form" so to say. But just because you have SSL doesn't mean your site is safe. I think the ability for someone to access or alter data in your database without permission is probably the #1 safety issue.

    To be honest; I think, unless you're a bank, a simple GoDaddy SSL cert ($12.99) one will work. That's what I use on Freelancify (hint: the homepage section doesn't have it for page loading time purposes, but click on the Login or Register buttons and you'll see it in action).
    Need your website made? Find and hire a freelance web designer/developer at Freelancify.com (my own Fastlane startup, so please support!)

  6. #5
    (4) Ferrari theBiz's Avatar
    Joined
    Jul 2009
    Locale
    NJ
    Posts
    869
    Thanks
    191
    Thx'd 270 times in 166 Posts

    Default

    next question if an experienced person comes here.... is it easy or possible to use SSL with a pop up module type of log in considering its not on a web page but a module or function?
    "Ask me for anything," said Napoleon to his lieutenant. "Anything but time."

  7. #6
    (3) Lamborghini LightHouse's Avatar
    Joined
    Aug 2007
    Locale
    Northern VA
    Posts
    2,379
    Thanks
    472
    Thx'd 760 times in 452 Posts

    Default

    Just use anything that isn't a brand new company. geotrust and rapidssl are pretty cheap. its all encryption and comes down to the company storing the private key. Pick something and go with it, most of the time the "badges" they use are ugly anyway, you can make your own SSL badge provided your site is completely secure.
    Don't talk about it, blog about it! - ChrisWaldron.com
    Feel free to e-mail through the site if you need SEO, Conversion Rate Optimization (CRO), or site/e-biz assistance.

  8. #7
    (4) Ferrari theBiz's Avatar
    Joined
    Jul 2009
    Locale
    NJ
    Posts
    869
    Thanks
    191
    Thx'd 270 times in 166 Posts

    Default

    Hey Lighthouse if i go with something like Geotrust which i have been thinking of, can i change their logo colors or you are saying i can create a completely custom one with my brand on it.. any examples of custom ones? thank you.
    "Ask me for anything," said Napoleon to his lieutenant. "Anything but time."

  9. #8
    (3) Lamborghini LightHouse's Avatar
    Joined
    Aug 2007
    Locale
    Northern VA
    Posts
    2,379
    Thanks
    472
    Thx'd 760 times in 452 Posts

    Default

    Just google it. There are plenty of custom ones out there. And you can't change geotrust because its generated on their end

    Sent from my SGH-I897 using Tapatalk
    Don't talk about it, blog about it! - ChrisWaldron.com
    Feel free to e-mail through the site if you need SEO, Conversion Rate Optimization (CRO), or site/e-biz assistance.

  10. #9
    (4) Ferrari theBiz's Avatar
    Joined
    Jul 2009
    Locale
    NJ
    Posts
    869
    Thanks
    191
    Thx'd 270 times in 166 Posts

    Default

    well what i mean is can i right click download geotrust, edit the colors, then upload onto my site or would that be violating most company's terms? I googled around, didnt see anything.
    "Ask me for anything," said Napoleon to his lieutenant. "Anything but time."

  11. #10
    (6) Mercedes healthstatus's Avatar
    Joined
    Apr 2011
    Locale
    Indianapolis, IN
    Posts
    450
    Thanks
    65
    Thx'd 248 times in 165 Posts

    Default

    I use the rapidssl certificates and the wildcard cert (wildcard allows you to protect ALL your subdomains also). The certificate is for your server, so as long as the login process is generated by the server and communication is between the client and that server using the correct protocol, the cert will be valid. All the cert is doing is using standardized methods for the client to confirm that they are talking to a server that is "certified" to be who they say it is.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •