SSL vs SSH (Full Version)

All Forums >> [Web Development] >> Search Engine Optimization and Web Business



Message

pmagas -> SSL vs SSH (3/21/2007 14:30:21)

I'm getting into a new area (for me, that is) and I could use some guidance. The site I'm setting up needs to accept credit cards. My host has SSH access. Will that help me with setting up an SSL page? Do I necessarily need SSL? Or will using https: and php for the form be sufficient?

The site owner doesn't want to use PayPal - he has merchant accounts with the credit card vendors and doesn't want to incur more fees.

The more I've researched, the more confused I have become. If someone can point me in the right direction, it would be most appreciated.

Thank you much!!



Reflect -> RE: SSL vs SSH (3/21/2007 14:43:28)

quote:

My host has SSH access. Will that help me with setting up an SSL page?


Sure won't. SSH, think telnet. SSL is a certificate that is applied at the folder level so the https will resolve and be secure for purchases and other "things".

Take care.

Brian




pmagas -> RE: SSL vs SSH (3/21/2007 15:01:52)

Brian, Thank you!! - I get it now. You put it so succinctly. I was looking at so many acronyms, I was thoroughly lost. So will I need to buy one of the certificates from Thawte or VeriSign or such?

My host offers one from GeoTrust for $49/yr. Does anyone have any experience with them? And is that a reasonable price?

As always, thank you for your help!!!



ou812 -> RE: SSL vs SSH (3/21/2007 15:11:55)

I just set one of my clients up with GeoTrust, it is costing them $99/year.

I don't seem to be able to find it now but when searching on Google I was able to find some nice comparisons between the major SSL Certificate companies.




pmagas -> RE: SSL vs SSH (3/21/2007 15:15:15)

Thanks, Brian! That's making the $49/yr look good. I was getting that sense from the first few I found on Google, but that was at first glance.

Did you have any trouble with the setup with GeoTrust? Thank you for your help!!

Cheers!



BobbyDouglas -> RE: SSL vs SSH (3/21/2007 15:39:56)

A $10 SSL Cert will give you the same security as a $1000 SSL Cert. The only difference is the warranty they provide, and the image of the company providing it. To web designers, Verisign is considered to be very highly regarded, however, consumers do not always know that. The same thing goes with low volume and high volume certs, you still receive the same amount of protection.

The warranty and image is what you pay for. As long as you have a URL containing the https on the front, then you shouldn't have any problems with security.

The $49/yr price is a good price for GeoTrust. Your host will need to help you install the SSL Cert, and they might even charge an additional installation fee. Keep in mind that if you buy this cert, it will only work for the complete address that you configure it for. This means, you can have the cert work for https://www.your-domain.com or https://your-domain.com or https://secure.your-domain.com . SSL Certs can only work for ONE of the full addresses. You are limited to a sub domain, and domain name. If you want the ssl cert to work on all domains, then you will need to look into something called a Wildcard SSL Cert.

I wouldn't be surprised if the $99/yr cert was the exact same one as the $49/yr cert [8D]



ou812 -> RE: SSL vs SSH (3/21/2007 18:33:47)


quote:

ORIGINAL: pmagas
Did you have any trouble with the setup with GeoTrust? Thank you for your help!!


No troubles at all... but the host did it for us. I just "used" it after it was installed, a couple days later. And as Bobby stated, you need to specify the address that is to be httpS'ed

I agree too Bobby, that the 99 vs 49 is probably just the same!



pmagas -> RE: SSL vs SSH (3/21/2007 20:56:26)

Thank you all!! I'll try the $49 way - not much to lose there. And thank you *so* much for the domain info. I'm going to be redesigning the site while I'm at it and was considering using a subdomain or two - with this information, I can do a better design job and make sure I build in the flexibility I need.

Cheers!



coreybryant -> RE: SSL vs SSH (3/22/2007 5:18:10)

Geosign is owned by Verisign actually now. Verisign is the largest SSL provided while Comodo is the second. If you have a chance, check them out. We have been using them now and their support is fantastic. They verify the websites before using them, something that Geosign does not do which unfortunately could mean other problems down the road.

There is also now the EV certs as well which are better in the long run for some companies. If price is an issue and you can generate your own CRT, check out EV1 servers for a Geosign since they are a reseller and able to get Geosign's certs a bit cheaper.



Page: [1]

Valid CSS!




Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI
0.0625