SSL - Advise Me

CJ6 · Feb 22, 2017

So, I don't know much about SSL. I know that Google says that it affects ranking a little.
I'm developing a social website...possibly having paid membership as an option. I wonder if I should go ahead and get SSL for it. I might one day sell a few things through it (woocommerce) if it becomes successful (0.1% chance of that happening). Do you suggest I get a SSL Cert? If so, what kind. ..or do you have recommendations where to get it?
Thanks! (I'm a big time newb when it comes to SSL.)

Steven McEvoy · Feb 22, 2017

I recently got it for one of my websites. I suggest it because it gives your viewers a more secured feeling using your website specially for ecommerce. What kind of niche is it?

Webfundament is a great place

Domains - Wanted · Feb 22, 2017

CJ6 said:
...Do you suggest I get a SSL Cert?

It's a no brainer, especially since you can get one for free

If so, what kind.

EV (Extended Validation) SSL is best, but expensive.

..or do you have recommendations where to get it?

Get a free SSL from https://letsencrypt.org

Jurgen Wolf · Feb 22, 2017

https://www.keycdn.com/blog/https-performance-overhead/

Christian Taylor · Feb 22, 2017

I would absolutely recommend an SSL certificate for ANY site that even has a log in form. I don't think you need a greenbar (EV) cert, maybe just a regular PositiveSSL one for now. I use ssls.com https://www.ssls.com/ssl-certificates/comodo-positivessl

namezest · Feb 22, 2017

SSL does make your site a little slower but if it is not a big site full of dynamic pages, your performance hit will not really be noticeable. If your site will handle any paypal links or member fees yes get ssl. A simple one ranges from free to $20 per year, wildcards are more expensive, the green bar is not needed for a new site.

CJ6 · Feb 22, 2017

Steven McEvoy said:
I recently got it for one of my websites. I suggest it because it gives your viewers a more secured feeling using your website specially for ecommerce. What kind of niche is it?

Webfundament is a great place

I'll definitely look into getting a SSL today or tomorrow.
The niche is one that we have discussed through PM. I will let you when I get it up and running. I'm trying something a little different as far as a website goes.

TheWatcher · Feb 22, 2017

You just need a standard SSL, no need for the expensive one to provide a session security.

Steven McEvoy · Feb 22, 2017

CJ6 said:
I'll definitely look into getting a SSL today or tomorrow.
The niche is one that we have discussed through PM. I will let you when I get it up and running. I'm trying something a little different as far as a website goes.

If you have any questions just shoot me a pm.

CJ6 · Feb 22, 2017

Is it best to setup the website as https first, then get the cert?

Steven McEvoy · Feb 22, 2017

If you set your website as https it wont work without the ssl you have to redirect the http to https once you have the ssl

mpls · Feb 22, 2017

Never pay for SSL cert.
Never.
Serious hosting companies (I use dreamhost) offer it for free.
They don't? Use cloudflare (in addition you've a cdn).
Remeber to write a new rule in your .htaccess file (if you use apache) in order to redirect all traffic to your secure resources (https).

Steven McEvoy · Feb 22, 2017

mpls said:
Never pay for SSL cert.
Never.
Serious hosting companies (I use dreamhost) offer it for free.
They don't? Use cloudflare (in addition you've a cdn).
Remeber to write a new rule in your .htaccess file (if you use apache) in order to redirect all traffic to your secure resources (https).

It all depends, you might of got it from free but how much a month do you pay for hosting and how many websites do you get per plan. It all ties in together to where you might be paying more a monthly, so they can offer to you for free.

mpls · Feb 22, 2017

Steven McEvoy said:
It all depends, you might of got it from free but how much a month do you pay for hosting and how many websites do you get per plan. It all ties in together to where you might be paying more a monthly, so they can offer to you for free.

For shared hosting (on SSD hard drive) $ 5 per month.
Unlimited websites, unlimited database, unlimited disk space, unlimited email, all unlimited.

For my VPS hosting $ 30 per month, 2 GB ram, 60 GB hard disk.
All unlimited till 60 GB.

I'm very very happy with my hosting company.
In addition I use on every project cloudflare. $ 0 per month, and super fast my sites.

Steven McEvoy · Feb 22, 2017

So your tell me for free your website has its own Dedicated IP and a private SSL?

carob · Feb 22, 2017

CJ6 said:
Is it best to setup the website as https first, then get the cert?

Your host may let you generate a self-signed cert (ok for development) or there may be a free certificate available through Cpanel or LetsEncrypt.

It is probably easier to use https from the start, then no need to make changes.

mpls · Feb 22, 2017

Steven McEvoy said:
So your tell me for free your website has its own Dedicated IP and a private SSL?

No, I don't tell you you've a dedicated IP.
Shared hosting has not a dedicated ip, it's shared.
Yes for VPS.
Yes for SSL.
If you use cloudflare you can not have a dedicated IP, your site is on all cloudflare nodes around the world (it's a cloud & CDN).
Plus, cloudflare, hide the IP origin server (for security).
Feel free to visit to visit cloudflare.com in order to understand how their network works.

Steven McEvoy · Feb 22, 2017

mpls said:
No, I don't tell you you've a dedicated IP.
Shared hosting has not a dedicated ip, it's shared.
Yes for VPS.
Yes for SSL.
If you use cloudflare you can not have a dedicated IP, your site is on all cloudflare nodes around the world (it's a cloud & CDN).
Plus, cloudflare, hide the IP origin server (for security).
Feel free to visit to visit cloudflare.com in order to understand how their network works.

Well their you go thats why you have it for free. Youre not on your own Dedicated IP.

mpls · Feb 22, 2017

Steven McEvoy said:
Well their you go thats why you have it for free. Youre not on your own Dedicated IP.

Sorry mate, but in this thread we are talking about SSL cert or about dedicated ip?
Open post need a SSL cert, not a dedicated ip, and he can have 1 for free.
On cloudflare or on his hosting company.

Steven McEvoy · Feb 22, 2017

mpls said:
Sorry mate, but in this thread we are talking about SSL cert or about dedicated ip?
Open post need a SSL cert, not a dedicated ip, and he can have 1 for free.
On cloudflare or on his hosting company.

I am just going to let you read this.

https://helpdesk.ssls.com/hc/en-us/...need-a-dedicated-IP-to-install-a-certificate-

carob · Feb 22, 2017

Steven McEvoy said:
I am just going to let you read this.

https://helpdesk.ssls.com/hc/en-us/...need-a-dedicated-IP-to-install-a-certificate-

That says you don't need a dedicated IP unless surprisingly your server doesn't support SNI yet or you get traffic from old browsers - most of those it seems are not in use in the developed world.

To sum up, ordering a dedicated IP address is not mandatory if SNI technology is available to use and the issue of SNI incompatibility is not critical for you

If you want it plenty of hosts offer a fixed IP as an addon for a low monthly fee.

carob · Feb 22, 2017

CJ6 said:
I'm developing a social website

You need an SSL certificate. Users will get browser warnings on your login pages if you don't have SSL and a valid certificate. A lot of users will just turn around and leave when they see warnings.

Steven McEvoy · Feb 22, 2017

carob said:
That says you don't need a dedicated IP unless surprisingly your server doesn't support SNI yet or you get traffic from old browsers - most of those it seems are not in use in the developed world.

If you want it plenty of hosts offer a fixed IP as an addon for a low monthly fee.

If you read to the bottom by:

Thus, a dedicated IP address is a better option in terms of reliability, browser compatibility and lower risks of server downtime. Here are five main reasons a dedicated IP address is worth paying for:

I was sharing because I believe having a Dedicated IP address is worth it for your website specailly for social or ecommerce.

For a regular website with no need of signing, or creating accounts just content niche website, I wouldnt even get a SSL

LucidDomains · Feb 22, 2017

I have just received an email from Google Webmaster Tools saying that any site that has login/password page and does not have an SSL will get a message in Chrome saying something like "This page is unsecured."

Don't particularly want to add an SSL.

Steven McEvoy · Feb 22, 2017

LucidDomains said:
I have just received an email from Google Webmaster Tools saying that any site that has login/password page and does not have an SSL will get a message in Chrome saying something like "This page is unsecured."

It will say that! Happen to my website before the SSL

SSL - Advise Me

My favorite movies are too offensive now. Whimps.Top Member

CFaDN.comTop Member

Top Member

standforUkraine.comTop Member

Established Member

Top Member

My favorite movies are too offensive now. Whimps.Top Member

Founder, MAJ.comTop Member

CFaDN.comTop Member

My favorite movies are too offensive now. Whimps.Top Member

CFaDN.comTop Member

Top Member

CFaDN.comTop Member

Top Member

CFaDN.comTop Member

Top Member

Top Member

CFaDN.comTop Member

Top Member

CFaDN.comTop Member

Top Member

Top Member

CFaDN.comTop Member

LucidDomains.comTop Member

CFaDN.comTop Member

Similar threads

We're social

Pinned

Appreciation

Agreement