Shared vs Private SSL CERTIFICATES

[spunkypup]

Generally speaking I know in a fantastic world, we would all have private SSL certs and Dedicated IP addresses....

 

but as a new company, I can't afford this....

 

My question is, whats peoples general views on SHARED SSL Certs?

 

Are they generally acceptable for a small company to use?

 

PS : All payments are processed OFF SITE ( through a third party ).... I just want to secure the customers area and admin area.

[Jack_mcs]

Yes, they are acceptable. There is a stigma against using them by shop owners but I think the general web surfer never notices it, or if they do, I doubt they think twice about it.

 

Jack

[rhanestad]

I have same issue, on a budget and can't go the dedicated IP route with a personal cert. I am just setting up my site and plan on having 3rd party checkout vendors. You mentioned you are using one offsite, can you let me know who it is. Don't they normally require your site to be secure before accepting your site checkout payment processing?

 

Also, what scripts or other programs are you looking at to keep your customer information secure. As I understand PHP scripts won't work with a shared certificate.

 

Thanks!

[jhande]

I was\am in the same position starting my ecommerce site - limited funds.

 

I am using the shared SSL provided by my host for login, account creation and the checkout process.

The only problem I have encountered so far, is that the pages take a long time to load on my dialup connection.

If my site starts making enough money to justify upgrading, then I'll move next to a dedicated IP and private SSL. I would like to see it make enough money and go one further, a dedicated server to really speed things up.

 

As far as a shared SSL not working with PHP, the only issue I am aware of is cookie sessions. I believe osC has fixed that problem.

 

Reference to the problem: http://www.modwest.com/help/kb5-264.html

 

Customers will see the padlock when and where they need to enter personal information. And there information is secure while uploading to your database.

 

I use off-site PayPal to process all payments for now. So PayPal's SSL takes care of that aspect.

 

Hope that helps shed some light. ;)

[rhanestad]

Sounds like my host is the issue. Maybe time to start looking for another one.

[jolicatellas]

I was\am in the same position starting my ecommerce site - limited funds.

 

I am using the shared SSL provided by my host for login, account creation and the checkout process.

The only problem I have encountered so far, is that the pages take a long time to load on my dialup connection.

If my site starts making enough money to justify upgrading, then I'll move next to a dedicated IP and private SSL. I would like to see it make enough money and go one further, a dedicated server to really speed things up.

 

As far as a shared SSL not working with PHP, the only issue I am aware of is cookie sessions. I believe osC has fixed that problem.

 

Reference to the problem: http://www.modwest.com/help/kb5-264.html

 

Customers will see the padlock when and where they need to enter personal information. And there information is secure while uploading to your database.

 

I use off-site PayPal to process all payments for now. So PayPal's SSL takes care of that aspect.

 

Hope that helps shed some light. ;)

 

Does this mean if my payments are processed through PayPal I don't need SSL? (though I do accept direct deposit & cheque payments)

[Jack_mcs]

No, you need an ssl installed, either private or shared. Jim was saying he uses a shared one. Without one installed, your customers private information is not protected.

 

Jack