Results 1 to 22 of 22

Thread: Https or not?

  1. #1

    Https or not?

    Hi All,

    I would like to know something about ecommerce and https, on some ecommerce the payment processor is on the website itself, therefore https is needed but what about paypal,clickandbuy and others?

    For example, my customers will input these details prior the https url:
    name
    surname
    email
    address
    product quantities


    do I really need to be https on my site prior passing these informations to paypal or clickandbuy? Or can I just stay on http, how would you do it on your site?

    I have heard that some people ill think to be better protected when you own site is https without thinking that the transaction itself will not be made on the site but over the payment processor site.

    Hope to get some help!

    Many Thanks,

    Ben

  2. #2
    Join Date
    Aug 2003
    Location
    Chesapeake, VA
    Posts
    3,381
    Hi Ben,

    It really depends on your specific audience. As such, I don't really believe there is a blanket yes or no answer to this question.

    Without a doubt, the general public is educated to the point where they absolutely expect https (and the secure lock on the browser) to be present any time they enter in cardholder payment details. Some people might want to see everything secured; many others might not care.

    However, the fact that this is a concern at all might be a good enough reason to go ahead and get an SSL cert and secure that information... it is inexpensive to obtain a cert these days and it certainly can't "hurt" so it can only help.

    So my vote would be that if you have any doubts at all, go for it - it can only help.
    CDGcommerce.com - Trusted Merchant Account Solutions since 1998
    Many thousands of successful, growing businesses benefit from our expertise every day. You can, too!
    We help merchants to eliminate gateway costs, reduce & mitigate fraud and achieve streamlined PCI compliance.
    Learn more today at http://www.cdgcommerce.com - we look forward to helping your business grow!

  3. #3
    THanx CDG,

    I will add one to my site then, You are right about everything.

    Regards,

    Ben

  4. #4
    Join Date
    Feb 2005
    Location
    United Kingdom
    Posts
    3,476
    Https all the way, as it will provide secure pass the details of your clients to your website.
    Explore our outstanding VPS choices tailored to your budget, and we welcome reasonable offers.
    VPS Price Match Guarantee on: All our range of DDOS protected XEN HVM VPS
    == Contact us for any online solution development or managed / unmanaged vps hosting ==

  5. #5
    Definitely https from start to end point.

  6. #6
    Thanks mate!,

  7. #7
    Do you know any good tutorial that could help me installing a https link on m checkout pages?

    Thanks!

  8. #8
    Hi Bambinou,

    I think this site can help you with ssl.
    http://www.sitepoint.com/article/sec...-2-server-ssl/

  9. #9
    Thank you so much Woutervz,

    I am going to have a look at it now.


    BamBam

  10. #10
    Ok I just read it all, it teaches well how to create the SSL certificat but does not show you how to add it to your checkout.
    I have my SSL on my site already, the server admin have done it.

    I only want the ssl certificat to be on on my checkout page for exmaple:
    http://www.mysite.com/directory.php?...ction=viewcart

    How to do this?
    is it an hard job?


    Many thanks,


    BamBam

  11. #11
    Greetings:

    For ecommerce you want https.

    And for PCI Compliance, depending on the page, it is required.

    Thank you.
    ---
    Peter M. Abraham
    LinkedIn Profile

  12. #12
    Hi Bam,

    You can switch the url from http to https when you request the checkout page?

  13. #13
    oh yesmthanks Woutervz, I did not even think about something as simple as thatlol, I was looking at totally something else.

    Many thanks,


    Bam

  14. #14
    One thing I would like to ask, what happen is I just add the https on the full site? would this be ok?
    Could this overload the server in time of high traffic?

    Thanks for your help

  15. #15
    If you can have https , do it mate .

  16. #16
    ok thanks,

  17. #17
    Join Date
    Aug 2003
    Location
    Chesapeake, VA
    Posts
    3,381
    I honestly think it wouldn't be necessary to put the entire site in https - such as pages that just contain catalog pages of products or services.

    If you display all of that via https, it is more than likely going to load slower and you may run into potential order abandonment if people get frustrated as a result of that.

    The preferred solution is typically to have non-https for your catalog and then have https in place for any customer order entry pages & checkout pages.
    CDGcommerce.com - Trusted Merchant Account Solutions since 1998
    Many thousands of successful, growing businesses benefit from our expertise every day. You can, too!
    We help merchants to eliminate gateway costs, reduce & mitigate fraud and achieve streamlined PCI compliance.
    Learn more today at http://www.cdgcommerce.com - we look forward to helping your business grow!

  18. #18
    Hi Cdg

    I asked my web programmers to only add it to the checkout, I tried to add it on the full site and it was causing other problems, page slowing down, forms not going through, I have to stop it.

    Thanks for your help,


    I would like to ask you,do you know anything about RSS feed?

    I am not too good in coding and my web programmers are not here today, I have a page in PHP where my musicians top charts are showing, it is a dynamic content.
    My real problem is, how to get an RSS feed working on dynamic content?

    What I do not understand is that PHP will give an output with pictures and band names that could be read in html(if you look at the source code),but when I try to generate an RSS feed from an RSS generator it just does not work, any ideas please?

    Regards,


    BamBam

  19. #19
    Join Date
    May 2009
    Location
    Ulyanovsk, Russia
    Posts
    204
    Bambinou, SSL certificate is recommended a lot, even if you have web-based type of integration with your payment gateway (when customers are redirected to the site of the payment gateway - in this case it is implied that the payment gateway is responsible for credit card details protection).

    With SSL certificate you can also make registration process secure for your customers and admin section secure for yourself (in most shopping carts at least). I believe the certificate is already installed on the server, thus secure connection for the store should be turned on either from admin section (if there is one) or using some other way.
    X-Cart - PHP shopping cart used by tens thousands online merchants worldwide.
    Follow us on Facebook

  20. #20
    Join Date
    Sep 2007
    Posts
    211
    Yea its so simple to have https these days and your customers will look for it. Defiantly go ahead and get it set up.

    John
    Great Plains Web Hosting
    Providing Small Business Solutions
    Hosting For Your Small Business

  21. #21
    thanks John, really appreciate your feedback.

    Bambam

  22. #22
    Join Date
    Feb 2007
    Location
    Corvallis, OR
    Posts
    299
    On any page that you are requesting vital private information that your customers may feel scared giving out over the internet, it is nearly mandatory to have a SSL installed.
    Bobby Samai - Director of Marketing
    www.peakinternet.com 1.800.731.4871 Ext 4968 24/7 Support Center
    Out to change the way business is being done since 1992
    Colocation | Dedicated | VPS | Shared | Broadband | Fiber

Similar Threads

  1. SSL https
    By TinyHosting-Ashley in forum Hosting Security and Technology
    Replies: 5
    Last Post: 07-11-2008, 08:06 PM
  2. https://www.pay-ace.com/
    By cavalry in forum Ecommerce Hosting & Discussion
    Replies: 7
    Last Post: 01-09-2005, 12:53 PM
  3. https help
    By 13erla in forum Hosting Security and Technology
    Replies: 1
    Last Post: 06-27-2004, 11:11 PM
  4. https / SSL
    By sigmund in forum Hosting Software and Control Panels
    Replies: 4
    Last Post: 02-10-2003, 03:29 PM
  5. how to use https, new to ssl
    By rhytha in forum Hosting Security and Technology
    Replies: 1
    Last Post: 10-27-2002, 05:20 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •