SPECIAL OFFER: Only $69 for access to everything in OSTraining for 1 year! You save $75! 
Join today and get access to 1,000's of books and videos. Learn WordPress, Drupal, Magento, Joomla and more! Sign up today!

using ssl on my site

5 years 6 months ago #124260 by agarger
using ssl on my site was created by agarger
do you recommend having ssl on my site. We don't take credit card information on our site but we are a paid membership organization and have pages requiring members to login to access do you recommend having ssl protection for these login pages. Have you heard about the free Let's Encrypt SSL certificate that Siteground is offering.

Please Log in to join the conversation.

5 years 6 months ago #124264 by Nick
Replied by Nick on topic using ssl on my site
Hi Anne,

Yes, we recommend SSL site wide, even in those situations. Also, you'll get a small SEO boost from have SSL site-wide.

I didn't know Siteground started offering Let's Encrypt SSL certificates, but I did know about Let's Encrypt SSL It's an excellent, secure option at a very affordable price (free). So if you don't have a certificate, I'd recommend trying it out at Siteground.

Hope this helps! Let us know if you have any questions and we'll be glad to answer.

Kind regards,
Nick

Follow us on Twitter - twitter.com/OSTraining
Like us on Facebook - facebook.com/ostraining

Please Log in to join the conversation.

5 years 6 months ago #124459 by agarger
Replied by agarger on topic using ssl on my site
Hello,

regarding the ssl I enabled on all my login pages, before I enable for the other pages, is there any reason why a public page that is just an article or photos needs to be secure

Please Log in to join the conversation.

5 years 6 months ago - 5 years 6 months ago #124462 by Nick
Replied by Nick on topic using ssl on my site
Yes, because if the user logins in securely and navigates to one of those pages, their data (including their session information) would be exposed insecurely. If they were using the computer in an unsecured wifi location, the session information can then picked up by a malicious person and that person can log in with their account.

Hope this helps! Let us know if you have any questions and we'll be glad to answer.

Kind regards,
Nick

Follow us on Twitter - twitter.com/OSTraining
Like us on Facebook - facebook.com/ostraining

Please Log in to join the conversation.

5 years 6 months ago #124463 by agarger
Replied by agarger on topic using ssl on my site
The yireo redirect ssl plugin which I am using has a setting that enables ssl on all pages when logged in. Will this fix the issue you are talking about

I guess I'm hesitant about enabling ssl on all pages because it might slow down my site

Please Log in to join the conversation.

5 years 6 months ago #124465 by Valentin
Replied by Valentin on topic using ssl on my site
Hi agarger,

First, be sure your site has a SSL certificate installed. After that yes, you can use Yireo plugin to make the pages use https.

Let us know if we can help you in something else

Kind regards,
Valentín

Follow us on Twitter - twitter.com/OSTraining
Like us on Facebook - facebook.com/ostraining

Please Log in to join the conversation.

5 years 6 months ago #124466 by Nick
Replied by Nick on topic using ssl on my site
Yes, it will! That will work well.

Apart from that issue, the only other benefits I can think of are:
1) Users won't have their public (non-logged in) pages spied on. This is especially important for any pages that have form (e.g. contact us, search page, etc)
2) It's easier to maintain overall, since the entire site will be on SSL, so you can spot issues faster (rather than having two URLs to check).

Any slow down for the SSL is negligable. It won't be noticed. And it's worth the SEO boost.

Kind regards,
Nick

Follow us on Twitter - twitter.com/OSTraining
Like us on Facebook - facebook.com/ostraining

Please Log in to join the conversation.

5 years 6 months ago #124698 by fancynotion
Replied by fancynotion on topic using ssl on my site
For what it's worth ...

I recently moved a website to Siteground and inquired about Let's Encrypt. I was told that it would not work in my case because I have several PayPal buttons on my website and PayPal does not yet work with Let's Encrypt. I did not follow up and ask PayPal directly if this was true because Siteground offers an SSL certificate for free for the first year of hosting. So I simply turned on SSL for now.

Please Log in to join the conversation.

5 years 6 months ago #124700 by Nick
Replied by Nick on topic using ssl on my site
Hi fancynotion,

That's interesting! Are they simply Paypal buttons that redirect to Paypal (and the user enters their details there), or are they Paypal forms?

If the former, I'm not sure why that would be applicable. Curiously, letsencrypt.org/ has a Paypal donate button on their home page.

Kind regards,
Nick

Follow us on Twitter - twitter.com/OSTraining
Like us on Facebook - facebook.com/ostraining

Please Log in to join the conversation.

5 years 6 months ago #124705 by fancynotion
Replied by fancynotion on topic using ssl on my site
On my site, I have a PayPal button (no form) and when clicked it takes you to PayPal. The sales person for Siteground did not exam my site to see that I had the PayPal button but simply asked me if I did and then offered the information to me about Let's Encrypt and PayPal not being used together.

When I do a search about Let's Encrypt and PayPal, I turn up nothing that easily explains this in simple terms. Perhaps it's out there but I do not have the technical background to understand it. However, while doing a search, I noticed that one web hosting company, not Siteground, had the following statement on a web page that showed you how to turn on Let's Encrypt at their hosting site:

Let's Encrypt certificates should not be used for any domain processing online transactions such as Paypal, Credit Card payments, etc. These free certificates offer no warranties as compared to other SSL Certificates such as RapidSSL and a Comodo EV SSL

So that's all I "know" about this. Perhaps my sales rep didn't know what he was talking about or perhaps at one time it was not a good idea to use Let's Encrypt with PayPal but now it is OK. I figure I have a year to sort this out for myself and by then there should be more info available about it. So for now I will just use the free SSL certificate that comes with my one-year hosting package.

Please Log in to join the conversation.

5 years 6 months ago #124708 by Nick
Replied by Nick on topic using ssl on my site
Thanks for the info, Linda!

Since the Paypal button redirects to Paypal and all the transactions occur there, it should be able to be used on your site.

Yes, either there was a misunderstanding or things have changed since then. Glad to hear you have a working solution though!

Thanks again!

Cheers,
Nick

Follow us on Twitter - twitter.com/OSTraining
Like us on Facebook - facebook.com/ostraining

Please Log in to join the conversation.

Join today and get access to 1,000's of books and videos. Learn WordPress, Drupal, Magento, Joomla and more! Sign up today!