SSL provider

easyhostmedia said:
Free ones DONT provide validation which you get when you get a paid SSL cert in the form of an SSL badge which when clicked validates the SSL is correct and valid.
Click to expand...

From the "free ones", I believe you are referring to shared ssl certificates that show a warning sign when used and takes you to a different domain where the ssl is hosted. As for Let's Encrypt, it is a Domain Validated SSL that is free to use for anyone and encrypts your connections while keeping your traffic on the same domain.
 
Website Coffee said:
From the "free ones", I believe you are referring to shared ssl certificates that show a warning sign when used and takes you to a different domain where the ssl is hosted. As for Let's Encrypt, it is a Domain Validated SSL that is free to use for anyone and encrypts your connections while keeping your traffic on the same domain.
Click to expand...

No
when you get paid SSL you are also given a badge to display on your website and when visitor click on the badge they are given validation info to show the SSL is validated such as this

https://secure.comodo.com/ttb_searc...search=https://niceday-hosting.co.uk/&x=6&y=5

with free SSL from lets encrypt etc. you are not given any validation badges
 
easyhostmedia said:
No
when you get paid SSL you are also given a badge to display on your website and when visitor click on the badge they are given validation info to show the SSL is validated such as this

https://secure.comodo.com/ttb_searc...search=https://niceday-hosting.co.uk/&x=6&y=5

with free SSL from lets encrypt etc. you are not given any validation badges
Click to expand...

That's definitely true. Let's Encrypt doesn't provide any validation seals and only validated on the domain-level but as far as the level of encryption, there shouldn't be much of a difference
 
Website Coffee said:
That's definitely true. Let's Encrypt doesn't provide any validation seals and only validated on the domain-level but as far as the level of encryption, there shouldn't be much of a difference
Click to expand...

but anyone visiting your website will look for validation, if you have a business website then you should be using a paid SSL.

If a business cannot be bothered to spend $9 a year to get a paid SSL then they dont care about security and will never get by business .

free SSL are fine for blogs and personal websites but should not be used for business websites
 
easyhostmedia said:
If a business cannot be bothered to spend $9 a year to get a paid SSL then they dont care about security and will never get by business .
Click to expand...

Just to clarify, you're referring to an ecommerce business where a purchase or transaction is made online (or any payment made online).

A Pest Control company, showing their info and their phone number - you'd you have no problem with them not using a paid certificate right?

Just checking - as we ourselves no longer have a paid certificate on our site, but we also don't collect any payment via the site. Speaking of ourselves, we haven't noticed any dip in sales/conversions.
 
bigredseo said:
Just to clarify, you're referring to an ecommerce business where a purchase or transaction is made online (or any payment made online).

A Pest Control company, showing their info and their phone number - you'd you have no problem with them not using a paid certificate right?

Just checking - as we ourselves no longer have a paid certificate on our site, but we also don't collect any payment via the site. Speaking of ourselves, we haven't noticed any dip in sales/conversions.
Click to expand...

Any business should use a paid SSL. Just say someone sets up a clone of your site, but does collect info etc., but visitors think it is you so give their details as it is using HTTPS, so is secure to them.

Such scammers will never pay for any security just like before free SSLs they never purchased an SSL, so by paying $10 for a paid SSL and getting a validation badge is more safe for visitors
 
feryonline said:
if you ignore pricing symantec is best. otherwise we prefer comodo
Click to expand...

Symantec are not that good (well their support is not)

I used to resell their products 'Norton etc.' until i had a personal issue with 1 of their products and spend nearly 3 days on their live chat system and phone to get this sorted only for the advisor to say ' I dont have a clue what i am doing, so i will have to pass you to someone else' at this point i blew and told the advisor not to bother and that he can also cancel my partner account as i dont want my customers going through this and the advisor told me he could not do that i would have to contact my partnership manager, i told him no i will not, you can do it if you know how to use a telephone and or email system and just cancelled the chat.
I enabled an emailed chat transcript, so had a copy of what was said and i copied this to the Symantec CEO.

so i would not recommend Symantec to anyone
 
I just use Let’s Encrypt for SSL in most cases, although they don’t provide a warranty, ive never come accross a situation myself where a warranty would be needed.

If you need SSL with a warranty, I’d just use RapidSSL from Comdo, for some reason The SSL Store gave me the Platinum reseller prices, even though I haven’t made $5,000/10,000 in sales.
 
You can use Comodo or Let's Encrypt. But for me it's mostly let's Encrypt. But now if you want to run a payment service for a bank for example, you should better buy a personalized certificate to a recognized certificate authority.

I can suggest you to use let's encrypt. Comodo is also good. But now depending on how easily you can set them up. And also try to make a comparison between them.
 
There are several types of SSL.

Free - most web hosting providers offer a free SSL certificate, which is great for SEO and will do the job of encrypting information but usually without any guarantee.

Low end paid certificates do the same as above but give a smaller monetary guarantee and site seals to give customers assurance.

EV or "Green Bar" certificates are used by larger companies costing around £150(GBP) offer the highest level of "prestige" where the websites owner’s identity is thoroughly checked before the certificate is issued. The encryption and guarantee is usually the same as lower end certificates.

There are also wildcard certificates letting you cover subdomains, which are slightly more expensive but essential if you’re planning on having subdomains with your website.
To summarise:
Free: Great for SEO and encryption works just fine. No site seal or guarantee
Low cost: Great for SEO and Have a small monetary guarantee and a site seal which may increase trust levels.
EV (Extended Validation): Highest level of security because the website owner details are thoroughly checked. The green bar gives customers who use the site peace of mind and can increase sales/conversions and trust.
 
dazzlehosting said:
To summarise:
Free: Great for SEO and encryption works just fine. No site seal or guarantee
Low cost: Great for SEO and Have a small monetary guarantee and a site seal which may increase trust levels.
EV (Extended Validation): Highest level of security because the website owner details are thoroughly checked. The green bar gives customers who use the site peace of mind and can increase sales/conversions and trust.
Click to expand...

WRONG
SSL certs are categorised as

1. Domain Validation
> Level of Validation
Lowest

> How it is verified
The Certificate Authority or CA simply verifies that the organization has control over the concerned domain.

> Mode of verification
Usually done via email. For verification, you either make changes to a DNS record or upload a file supplied by the CA to the domain. By demonstrating control over the domain, they will be issued a certificate.

> Time taken
Few minutes to few hours.

> Validation expense
Minimal since there is no human involvement.

> Indication
A browser with secured HTTPS connection.
Click to expand...

2. Organization Validated SSL Certificates
> Level of Validation
Medium

> How it is verified
The CA investigates the organization making the application though not very deeply. They will contact the organization to make sure it is authenticated.

> Mode of verification
The Certificate Authority validates the ownership of the domain along with organization information included in the certificate like name, city, and country.

> Time taken
Few days.

> Validation expense
More than domain validation since humans are involved.

> Indication
Display company information in certificate details.
Click to expand...

3. Extended Validation Certificate
> Level of Validation
Most strict level.

> How it is verified
The CA validates the ownership, organization information, physical location, and legal existence of the company. It also validates if the organization is aware of the SSL certificate request and then approves it.

Types of SSL Certificates

> Mode of verification
Documents are required to certify the company identity along with lots of checks.

> Time taken
Few weeks.

> Validation expense
Most expensive due to high human involvements.

> Indication
A green address bar with company’s name.
Click to expand...

A Free SSL is just a very basic SSL without any Validation and is renewed every 90 days
 
Go for free SSL if you have a normal blog.

Or choose a premium SSL if your website needs user's personal details like credit card, address and other stuffs.
 
Personally, I don't believe most visitors to informational or e-commerce sites even check what type of SSL that site has. Now days, it's either secure or not secure. That's actually scary in ways because there's no validation via Lets Encrypt. Sites may be secure, but that does not mean they're reputable.
 
SenseiSteve said:
Personally, I don't believe most visitors to informational or e-commerce sites even check what type of SSL that site has. Now days, it's either secure or not secure. That's actually scary in ways because there's no validation via Lets Encrypt. Sites may be secure, but that does not mean they're reputable.
Click to expand...

I agree.

Then you will get people of consumer sites saying I paid £20 for a pair of Adidas Falcon trainers and i have not received them. The site was secure, but i thought they were a bargain as they are normally £90.

Things like this are on the increase and free SSL make it easier for the scammers to make their sites look secure and genuine.
 
I would suggest Comodo SSL and Symantec SSL. Of course, if you're looking for a free SSL certificate, I would suggest you opt for Let's Encrypt.
 
Hello there:

--> Below are the best providers to consider when buying a SSL certificate:

1. Verisign
2. Commodo
3. Geotrust
4. Thwate
5. DigiCert

Choosing the best and most reliable SSL certificates available might be a matter of trust. You may be getting a provider that gives out inexpensive certificates but are not known. At the same time, some of the more inexpensive certificates are just as reliable as the expensive ones. Beyond that, you should take a look at the level of service that your provider is giving you.


--> There are three common types of certificates. Choosing the right one will be based on the level of security your website needs.

1. A "domain-validated SSL certificate", otherwise known as a low assurance certificate, is the standard type of certificate issued. Automated validation ensures that the domain name is registered and that an administrator approves the request. In order for the validation to be completed, the webmaster must either confirm via email or configure a DNS record for the site.

2. An "organization-validated certificate", or high assurance certificate, requires real agents to validate the domain ownership, plus organization information such as name, city, state and country. Similar to a low assurance certificate, it requires additional documentation to verify the company identity.

3. An "Extended validation certificate", is a new type of certificate that requires the most rigorous validation process. This type of certificate checks to ensure that the business is a legal entity and requires business information be provided as proof of domain ownership. Standard SSL certificates do not represent that your website is being operated by a legitimate, verified business. One exclusive feature of purchasing an EV certificate is that your website browser bar will display a green padlock. This can help to bolster consumer confidence and provide reassurance that the transaction is secure.

Further, you can buy SSL on your need if you wish to secure single, multiple, or subdomains including your main domain:

1. Single-name SSL certificates protect a single domain. For example, if you were to purchase a certificate for www.xyz.com, it would not secure abc.xyz.com.

2. Wildcard certificates allow you to secure an unlimited number of subdomains that live off a singular root domain. For example, say you want to secure the domain www.xyz.com and its subdomains. You would need to request a wildcard certificate with *.xyz.com as the common name. This certificate would secure www.xyz.com, abc.xyz.com, def.xyz.com, etc.
Wildcard certificates can easily pay for themselves over time, especially if you need to secure four-plus subdomains. As an added benefit, it’s much easier to manage one wildcard certificate than 12 single certificates.

3. Multi-domain certificates can protect upwards of 210 different domains with a single certificate (depending on the provider you choose).

Hope this helps you.
 
Last edited:
You must log in or register to reply here.

Supporters

Back
Top