SSL

[DRE]

What do you use it for? I bought it for my site to test out a Facebook App, which ain't working at the moment, what else can I use this for? I installed it in WHM and everything but other than the FB app I don't know what else to use it for.

 

[MattW]

I use SSL for my online shop.

 

[DRE]

I use SSL for my online shop.

Do you use Microcart? I wonder how I can use this with Microcart.

 

[Andy.N]

I use SSL 100% of my site. There is no reason not to these days, unless the cost is a problem for you.

 

[DRE]

I use SSL 100% of my site. There is no reason not to these days, unless the cost is a problem for you.

I wanted to do so but I got the $5 SSL from Go Daddy because I'm using vanity urls with Better Blogs and that creates a bunch of subdomains. I would have to spend around $200 a year for SSL for subdomains.

 

[Andy.N]

I wanted to do so but I got the $5 SSL from Go Daddy because I'm using vanity urls with Better Blogs and that creates a bunch of subdomains. I would have to spend around $200 a year for SSL for subdomains.

Nope. You do not need to pay that much.
I was using GoDaddy EV SSL for 2 years but now I'm using what @digitalpoint is using
https://www.startssl.com/?app=40

 

[MattW]

Do you use Microcart? I wonder how I can use this with Microcart.

No, it's a standalone shop. I use OpenCart

 

[DRE]

Nope. You do not need to pay that much.
I was using GoDaddy EV SSL for 2 years but now I'm using what @digitalpoint is using
https://www.startssl.com/?app=40

[1] Wild Card capability supported with non-EV certificates (Class 3)
Class 2 / 3
US$ 59.90[3]

 

[Andy.N]

You should get class 2 which is $59 for 2 years and have wildcard domain so you can use it for your subdomains as well.
Isn't that cheaper than your "I would have to spend around $200 a year for SSL for subdomains."

 

[DRE]

You should get class 2 which is $59 for 2 years and have wildcard domain so you can use it for your subdomains as well.
Isn't that cheaper than your "I would have to spend around $200 a year for SSL for subdomains."

What's this mean? [1] Wild Card capability supported with non-EV certificates (Class 3)

 

[DRE]

So basically I should only use SSL for login pages and payment pages for Microcart.

If I do it site-wide it may slightly slow down the site since it's not being cached in SSL.

http://kb.iu.edu/data/alwg.html
http://stackoverflow.com/questions/3882080/why-should-i-use-ssl
http://stackoverflow.com/questions/2025012/ssl-how-and-when-to-use-it
http://stackoverflow.com/questions/2177159/should-all-sites-use-ssl-by-default
http://support.exware.com/ssl.html

Mike says I can use it on Xenforo period, instead of just logins and shop pages.

http://xenforo.com/community/threads/ssl-https-integration.1435/

With CPU speeds these days, SSL comes with minimal overhead. For what SSL protects against (man in the middle attacks), you really should retrieve every page over SSL. (See this article, where Tunisia is allegedly modifying pages on the fly to steal credentials.) XF shouldn't have any issues when using the whole site in SSL, though if you find a problem, please do report it.

Even Kier says it's okay to do it for the whole site.

When you are as enormous as Facebook, every tiny amount of processing power used to generate a page costs a fortune, so it makes sense for them to optimise as much as possible, which could be a reason for them to limit their use of SSL. However, for most of us, until you have tens of millions of daily visitors, SSL is a valid option.

 

[Carlos]

At some point in the future, SSL will be a necessity to bring trust to your site.

 

[DRE]

I wonder if this messes up SEO and tracking.

 

[Matthew Hawley]

I dont get it. Why do you need a sign to show that people can trust you. That's like a criminal putting up a sign saying "I won't steal anything, just let me in".

 

[DRE]

I dont get it. Why do you need a sign to show that people can trust you. That's like a criminal putting up a sign saying "I won't steal anything, just let me in".

This thread is how I explained SSL to my site http://8thos.com/threads/coming-soon-ssl-integration.21226/ Maybe that explanation will make more sense to you than the links I posted.

 

[Jeremy]

SSL is about encryption, not just that someone can be trusted. Although, it usually marks it as a 'trusted' source, it has nothing to do with that. On SSL, all communications to and from your site are encrypted.

 

[DRE]

ahaha I just realized I explained SSL for protection against phishing and for the e-shop. I did not mention the Facebook App at all which was why I really wanted to get it in the first place. I done got off track...

 

[rdn]

SSL can cause you a problem if your serving an advertisement that doesn't support https.

 

[DRE]

SSL can cause you a problem if your serving an advertisement that doesn't support https.

I have enough issues without SSL that it won't anymore than it already is.

 

[DRE]

I demoted all my moderators (again) because I feel like if we're going to use SSL and an E-Shop, the site becomes more business-like and will not need more moderators, but something else entirely.