Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Security Protection .... Is this good enough


Baby Boy

Recommended Posts

Okay, I am opening up my own online urban apparel store this summer and I am trying to do multiple security research, I know there is a such thing as being too overprotected, but I am wondering if this will work.

 

I need everybodies opinion on this for me. I am planning to get the "Verified" and "Trust" logo from SquareTrade as well as a COMODO PremiumSSL certificate, then topping it off with Monster Merchant Account for right now, then later this summer I am going to acquire the VeriSign merchant account with fraudulent protection.

 

With the "Trust" and "Verified" logo by SquareTrade which is said to make people feel safe, and the VeriSign Merchant Accounts w/ Fraudulent Protection and the COMODO PremiumSSL with a $10,000 warranty and the TrustLogo --- do you think the site is protected enough?

 

Is there anything to make them feel safe?

Installed Contributions: AJAX Menu, AJAX Attributed Manager, AP URL ReWriting, Credit Class and Gift Vouchers, CCGV Report, Date of Birth PullDown, FCKEditor for Product Desc., Monthly Installment Payments, More Pictures 6, MSRP Savings, Must Agree to Terms on Checkout, Order Editor, Payment Method Fee, PopUp Promo, Private Messages, Purchase Order, Purchase Order Application, Secure Admin Login-Logout, STS Plus, SugarCRM Integration, Supertracker, Tax Exempt and Organization Discounts, Your Recent History.

 

23 Total Contributions Installed :)

Link to comment
Share on other sites

Make sure your address is not a Post Office box but a normal address... Get a toll-free number. Probably two of the cheapest things you can do to instill confidence.

 

Also make sure to implement Verified by Visa and Mastercard Securecode.

Link to comment
Share on other sites

  • 3 weeks later...

thanks man

Installed Contributions: AJAX Menu, AJAX Attributed Manager, AP URL ReWriting, Credit Class and Gift Vouchers, CCGV Report, Date of Birth PullDown, FCKEditor for Product Desc., Monthly Installment Payments, More Pictures 6, MSRP Savings, Must Agree to Terms on Checkout, Order Editor, Payment Method Fee, PopUp Promo, Private Messages, Purchase Order, Purchase Order Application, Secure Admin Login-Logout, STS Plus, SugarCRM Integration, Supertracker, Tax Exempt and Organization Discounts, Your Recent History.

 

23 Total Contributions Installed :)

Link to comment
Share on other sites

Okay, I am opening up my own online urban apparel store this summer and I am trying to do multiple security research, I know there is a such thing as being too overprotected, but I am wondering if this will work.

 

I need everybodies opinion on this for me. I am planning to get the "Verified" and "Trust" logo from SquareTrade as well as a COMODO PremiumSSL certificate, then topping it off with Monster Merchant Account for right now, then later this summer I am going to acquire the VeriSign merchant account with fraudulent protection.

 

With the "Trust" and "Verified" logo by SquareTrade which is said to make people feel safe, and the VeriSign Merchant Accounts w/ Fraudulent Protection and the COMODO PremiumSSL with a $10,000 warranty and the TrustLogo --- do you think the site is protected enough?

 

Is there anything to make them feel safe?

 

this will only secure/encrypt your data transmissions and has therefore only a very limited effect on the actual security of your site.

Treasurer MFC

Link to comment
Share on other sites

Basically, I am talking about for the checkout of the customer, is it good enough for security.

Installed Contributions: AJAX Menu, AJAX Attributed Manager, AP URL ReWriting, Credit Class and Gift Vouchers, CCGV Report, Date of Birth PullDown, FCKEditor for Product Desc., Monthly Installment Payments, More Pictures 6, MSRP Savings, Must Agree to Terms on Checkout, Order Editor, Payment Method Fee, PopUp Promo, Private Messages, Purchase Order, Purchase Order Application, Secure Admin Login-Logout, STS Plus, SugarCRM Integration, Supertracker, Tax Exempt and Organization Discounts, Your Recent History.

 

23 Total Contributions Installed :)

Link to comment
Share on other sites

Basically, I am talking about for the checkout of the customer, is it good enough for security.

A dedicated SSL cert is a MUST for any e-commerce site. It's not that there's anything wrong with a shared cert, it's just a matter of how it's perceived by the customer.

 

As for the ST seals, I use them myself.. Started with the basic eBay Sellers seal way back when I'd first started selling on eBay. I then moved to the Professional Sellers seal when it came about for eBay as I had my business then as well.

 

More recently, I've decided to make the move to my own storefront. I had MarketWorks and vendio storefronts, but didn't want to be paying seller fees to eBay or the rest for ym sales. So, I've now got my own storefront (osC). Since opening this store I've obtained a PremiumSSL cert, a Trusted Business seal, and a Security (Safe Shopping) seal.

 

The SSL cert as said before is a must. The Trusted Business seal assures the customer of the identity of the business that's running the store/site. The Security (Safe Shopping) seal is similar to the Hacker Safe or whatever it is logo. With the Security seal, your site's actually tested on a daily basis for various vulnerabilities and takes anywhere from 15-30 each time.

 

For the Security seal.. SquareTrade will simulate an unauthorized intrusion attempt, running individual tests created specifically to penetrate your system via known vulnerabilities as assessed by the SANS Institute and the National Infrastructure Protection Center (NIPC) at the FBI. For issues and security holes previously identified, SquareTrade will retest to confirm if they are resolved or "closed".

 

I definately noticed an increase in my conversion rate after getting the various seals over time, both on eBay and my own stores.

 

~James

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...