Tech: Do I need an SSL certificate?

Subject: RE: Tech: Do I need an SSL certificate?
From: Stilly River Sage
Date: 07 Aug 18 - 01:27 PM

I notice my Kaspersky will alert me to something on a page (usually on eBay) that it doesn't like and asks if I want to disconnect it. I select "disconnect," but this doesn't shut down the eBay page, it simply removes some ad or script that isn't secure.

Subject: RE: Tech: Do I need an SSL certificate?
From: DaveRo
Date: 07 Aug 18 - 01:24 PM

Thompson wrote: Do these notices saying "This page has no certificate - back to safety" or words to that effect have anything to do with the SSL certs?

Google's chrome browser has recently started marking non-SSL sites (i.e. http as opposed to https) as 'insecure'. Other browsers will follow suit:
Google Chrome update to label HTTP-only sites insecure

That should not be of concern unless you're entering private or sensitive data into it.

I don't know but I doubt if this warning will mention 'certificate'. Such a warning should apply only to SSL sites that are misconfigured or are still insecure. For example they may use a certificate that has expired, or does not correspond to the site name. That might or might not be of concern - it certainly is if you're doing a financial transaction.

People who run websites are being encouraged to adopt SSL but thousands of sites will continue as they are. Many do not require you to enter any information, or not sensitive information. Many amateur sites are unmaintained - including a fair number of folk-related ones. Hopefully these 'insecure' warnings will not be so scary that they stop people using these sites. In their otherwise laudable push to make the web more secure I hope browser-makers and ISPs don't render thousands of 'legacy' sites inaccessible.

Subject: RE: Tech: Do I need an SSL certificate?
From: Stilly River Sage
Date: 07 Aug 18 - 09:16 AM

I took out the post Jack remarked on, but it might not be spam. It was a sites offering information on the subject. Probably better if people search and find their own site offering the certificate (first check with your site management.) I usually search for information on my trusted review sites (PC Magazine, ZDnet, CNet) and reference sites like Wikipedia to start with.

Subject: RE: Tech: Do I need an SSL certificate?
From: Thompson
Date: 07 Aug 18 - 08:47 AM

Do these notices saying "This page has no certificate - back to safety" or words to that effect have anything to do with the SSL certs?

Subject: RE: Tech: Do I need an SSL certificate?
From: Jack Campin
Date: 07 Aug 18 - 05:53 AM

That was commercial spam. Can some mod get rid of it?

Subject: RE: Tech: Do I need an SSL certificate?
From: GUEST
Date: 21 Oct 16 - 05:03 AM


I did come across a University Students Union website that was being used by the IVFDF (mega dance fest) for ticketing that had no SSL/TSL
I know that a lot of people bitch about the transaction fees but there are good reasons for using a ticketing service.

Subject: RE: Tech: Do I need an SSL certificate?
From: Mr Red
Date: 20 Oct 16 - 05:32 AM

For my websites the only information that is in any way used (on one subdomain) is a cookie and that information is not collected, it remains on the users' browser for their convenience.

Unless, of course, Wordpress (being free) is doing things they don't tell you about.

I haven't seen anything that tells me of a limited free period, only hints of hooking me into wanting more.

I did come across a University Students Union website that was being used by the IVFDF (mega dance fest) for ticketing that had no SSL/TSL. As one fellow ceilidhnaut remarked that he insisted on telephoning for tickets, but then he is a retired unspecified employee of GCHQ (UK Gov mega-snoop).

Still cogitating.

Subject: RE: Tech: Do I need an SSL certificate?
From: GUEST,fortyfoursixteen
Date: 19 Oct 16 - 06:39 AM

You only really need it if users have to log into your website, or your website stores any kind of personal information. But there may be some legal need for an SSL. We've had our video website up an running for over a decade now and never used an SSL, purely because we don't store any personal information from users. It's the same reason we don't need a privacy policy. But, because we're based in the EU we do have to have the cookie warning.

I can't help but agree with you though. It probably is the service provider trying to add on extra costs.

Subject: RE: Tech: Do I need an SSL certificate?
From: BobL
Date: 19 Oct 16 - 03:12 AM

Might be worth checking which Certificate Authority is involved, as some seem to be better than others. Also you may find the "free" offer is only for a month - can you revert to an unsecured site if you choose not to continue?

Subject: RE: Tech: Do I need an SSL certificate?
From: GUEST,Kevin Mitnick
Date: 19 Oct 16 - 12:52 AM

You have to need it in case of:

• your website contains logins
• your website has forms that require personal or credit card information from your customers
• users chat on your websites

The SSL Certificate secures the personal information. It will make your users feel safer while making the online transactions, when they'll know that the website is secured by a trusted Certificate Authority.

If you have a blog or information website, I still recommend you to need an SSL certificate and a domain validated SSL is enough for startup website. By having an HTTPS link, your website will rank higher on Google and will be more trustworthy.

If you want good information on how to protect your website without bullshit, here's a blog with valuable information about it.

https://aboutssl.org/what-is-ssl-certificate

Subject: RE: Tech: Do I need an SSL certificate?
From: DaveRo
Date: 18 Oct 16 - 10:35 AM

Take a look at Lets encrypt

Subject: RE: Tech: Do I need an SSL certificate?
From: Will Fly
Date: 18 Oct 16 - 05:16 AM

Yes, my ISP occasionally offers me an SSL. I don't see any need for one as I also don't do anything that requires total confidentiality from my website.

The encryption that comes with the SSL is probably useful if you're passing commercial or other confidential data.

On the other hand, if it's free, I don't see any harm in accepting it either.

Subject: Tech: Do I need an SSL certificate?
From: Mr Red
Date: 18 Oct 16 - 04:20 AM

All about the https:// protocol

My ISP seems to be very keen to give me an SSL certificate for my website.
I can't see the immediate need for any of my websites because I don't conduct commerce, the only "two-way data" is contact forms.

Would the single come-on benefit me in any significant way?

It is clearly a lever to sell certificates for each domain and one each for the subdomains. (eg ask.stroudvoices.co.uk )

Do any webmeisters have any advice?