SSL

[Andy c]

I think I have bitten off more than I can chew again  I have found some ssl with 3 months free set-up ...comodo ssl
I have looked though most of the instructions but am wildly at a loss and by what it says I can really mess up my site if I get it remotely wrong
so I am in need of some advice or direction as I can't find much about it on zencart either and don't want to mess up my site as I have just got it to how I like it

thanks in advance 

[Grifter]

Personally I don't use SSL any more. I think it's just too much hassle. I had a prestashop site and I bought a SSL for it through Scotty. However, then there were images etc being pulled from a non secure place. For me that was too much to understand. I asked and got told the answer but still noone would say there is  a special folder where you can put image files and they are then from a secure place. In the end rather than having customers trying to go to checkout but being given warnings about security, especially with fireforx, I ditched it. I just use paypal and google checkout so I don't bother with it. Now without SSL there are never security problems putting customers off. Unless you're running a merchant account I wouldn't bother.

[Andy c]

I also only use paypal ,thinking about google as well ,but everyone harps on about sites having ssl don't trust it without bla bla bla
and as I'm starting up £80 is a heck of a lot of £££ ..Yes you say I could have gone with a cheaper place etc but when someone offers you free hosting to trial has a good all round package you can't help but use them .... can you see the brownie points .lol
honestly I often think it is needed just for the customers sake that's why I have chosen  free trial and low fees after just to get my site off the ground so to speak .

[seamus]

well, secure certificates are only really needed to protect sensitive info like billing details, names and addresses don't really need the same protection, that info is available everywhere, phonebooks etc
if your using paypal or google checkout you can still advertise your site as using a secure payment system, because it does, it uses a thirdparty like paypal etc to take payments on their secure system, so all the important data is protected

I don't see much point in using a secure cert unless you're processing card payments and the like on your own site, if your not then theres no data on your site that's of use to anyone and that they cant get by just opening up a phone book, names and addresses are all on public record somewhere,

[JhnStcks]

I thought you needed SSL to use google checkout, otherwise the google server couldnt use the callback function to create an order in admin.

Grifter if you still have the SSL active I can help you change everything to make it secure.

[paulc010]

Yes, Google checkout needs ssl to facilitate their equivalent to Paypal's IPN functionality.

Paul

[Grifter]

No you don't need an SSL for google checkout. I have it on sites and it works fine. The only thing that happens is that after a payment is received and you check into your account with google it gives you a warning that the payment was taken from a site without ssl. But, google's taking of the payment was secure in their system. Also you don't need SSL for paypal IPN. They reccommend not to use it without SSL but it is not a requirement. You can use postback on a shared host without SSL and it will work.

[Andy c]

have you guys not lost sales because you do not have ssl then .... as I always use ebay ..just trying to think what I do do if there is no ssl

[Grifter]

Well since I only use google and paypal I find that without the ssl I never get any warnings flashing up. With the SSL as long as it's set up correctly then it would enhance the cart experience I suppose. As for lost sales I wouldn't know. I think I lose sales because I take payment through a third party not the security of the site. Were I to have a merchant account and could take payments directly with a secure site I'm sure I would make more sales.

[Grifter]

I thought you needed SSL to use google checkout, otherwise the google server couldnt use the callback function to create an order in admin.

Grifter if you still have the SSL active I can help you change everything to make it secure.

Thanks for the offer John. I pulled the site down though. The supplier I had wasn't reliable and the only other source was someone from the other forum and the goods were coming from China. I wasn't keen on that idea so pulled the shop down. I don't currently sell anything on that site at the moment. Thanks for offering to to help though. On a side note. How do you make your logo etc be on the https rather than http.

[JhnStcks]

Very simple, change the url to https://www.yourdomain.com/yourimagefile.jpg

[Grifter]

So in the back office of prestashop it says upload your logo here. Where would I find the url to change?

[JhnStcks]

Which logo is that for? The main shop logo? Paypal module logo?

[Grifter]

It would be both. I had problems with them both.

[JhnStcks]

The main shop logo should automatically be changed to be from a secure location.  The paypal logo you need to input the correct location in the paypal module, and it will have use https to stop there being unsecure data on the paypal page.

If the main shop logo is giving unsecure data errors then you need to update the header.tpl file to the most current.

Prestashop v1 and 1.1 had some major problems with the way images were being displayed while on a secure page.  But they fixed it in 1.2.  So any unsecure data errors are being caused by images that you added through incorrectly coded modules, or html modules that you are using to display ads.