SSL Seal of Safety??

[dumbledory2]

Hello,

I use SSL on my site quite frequently and was hoping that someone could tell me whether or not powweb or equifax provides a Secure Seal image to put on my site when sensitive information is being submitted.

Afterall, I think users will want to know why the domain changes when they click to submit information and everyone knows the little lock icon is un-userfriendly.

The reason why I mentioned whether or not Equifax provides a seal, was because it turns out they are the ones who signed the certificate for powweb's ssl.

Can anyone help?

[SimCoWeb]

Hmmm...are you looking for one of those 'certificates' that pops up? Or, some type of logo / graphic that says the site is secure?

[dumbledory2]

that's right. a logo/graphic of some sorts verifying the site is secure.

[RadioRob]

You can't use the "Verisign approved" seal, as that has to be applied for by individual groups (and it costs a ton of money to do so)....

But what about using the OpenSSL logo?

Here are a couple:

http://www.yozons.com/pub/images/vendor/modssl.jpg

http://www.yozons.com/pub/images/vendor/openssl.gif

Good luck!

[dumbledory2]

thanks!

[RadioRob]

You betcha! Glad to help out. Drop us a note here on the forums if there is anything else we can do for ya!

[Pods Dad]

Hello,

I use SSL on my site quite frequently and was hoping that someone could tell me whether or not powweb or equifax provides a Secure Seal image to put on my site when sensitive information is being submitted.

Afterall, I think users will want to know why the domain changes when they click to submit information and everyone knows the little lock icon is un-userfriendly.

The reason why I mentioned whether or not Equifax provides a seal, was because it turns out they are the ones who signed the certificate for powweb's ssl.

Can anyone help?

Yeah it looks a bit Mickey Mouse when that happens and it puts people off when a box pops up and says 'ATTENTION' Why can't Powweb host our certificates if we wish, so everything looks bonafide?

Also in my cart if I put https://mysite.com in the php config file in regards to where my secure server is, it still seems to work?? The page comes up as https://www.mysite.com

Can Powweb please address this issue and come up with a good remedy please.

David

[tbonekkt]

Yeah it looks a bit Mickey Mouse when that happens and it puts people off when a box pops up and says 'ATTENTION' Why can't Powweb host our certificates if we wish, so everything looks bonafide?

Also in my cart if I put https://mysite.com in the php config file in regards to where my secure server is, it still seems to work?? The page comes up as https://www.mysite.com

Can Powweb please address this issue and come up with a good remedy please.

DavidWe don't currently support individual support domain SSL certificates. We only offer the shared SSL certificate. In the future, it may be possible for us to allow this, and it's something we're working towards, but at this time there's no timeline or ETA.

[stevel]

No box will pop up if you set up your site right. In particular, you must use links of the form https://examplecom.secure.powweb.com/whatever and not https://example.com/whatever.

The seals as graphics are, in my view, pointless, though if you want something more than the lock symbol to alert the user that the page is SSL-protected, feel free. The fancy seals are actually links to a verification service so that a user clicks the link and gets an acknowledgement that the site is legitimate.

[Pods Dad]

We don't currently support individual support domain SSL certificates. We only offer the shared SSL certificate. In the future, it may be possible for us to allow this, and it's something we're working towards, but at this time there's no timeline or ETA.

Why can you not do it? Please explain so we can understand, is it cost or something else...I have never heard of a hoster not doing this. Its basic for commerce Internet...or are you expecting just children to host with you? Are you a full blown hoster or not? Or have we been decieved?

David

[tbonekkt]

Why can you not do it? Please explain so we can understand, is it cost or something else...I have never heard of a hoster not doing this. Its basic for commerce Internet...or are you expecting just children to host with you? Are you a full blown hoster or not? Or have we been decieved?

DavidThere's no deception going on. As I stated, and as stevel further explained, we only offer shared SSL at this time. As to why we don't offer full-blown SSL certificates for each domain, mjp put it best recently:We're looking into ways to offer your own SSL certificates, but it's a thorny issue. Typically shared hosts that offer SSL do so on separate SSL servers, and each certificate requires a unique IP. If we went that route and 1% of you wanted certificates, that would require hundreds (and over time potentially thousands) of IPs. We do have a substantial IP block, but the separate SSL server method has it's own problems, which would be compounded by load balancing.

We have been looking into some "virtual" solutions that allow the use of a couple of hundred individual certificates per IP, but they are not feasible now, as they rely on very new browser technology which won't be widespread for several years (if ever). That would result in a very restrictive and arguably somewhat worthless SSL certificate.

But the issue is being investigated and we're trying to find an implementation that makes sense from our end and your end. We want to avoid implementing something that we would have to make changes to in the future if the demand for certificates increased.

[Pods Dad]

Thanks, sorry did not see that before. You have loyal customers here who just want the best.