SSL
From OCS Support Wiki
Contents |
Introduction
This article will describe the basics of how SSL works, help you determine if you need it, and explain the requirements and process we use to setup SSL on your site.
What is SSL?
SSL, or (Secure Sockets Layer), is a method of protecting a network communication. For the purposes of our web hosting service, SSL encrypts data to and from the web server while your visitor is using your site with the https:// prefix in the URL instead of http://.
Do I Need SSL?
Surprisingly, many people think they need SSL when in fact they often do not. SSL alone does not secure your website. SSL works in concert with secure pages that ask the user for sensitive information that needs to be provided.
You need a SSL certificate if you:
- Have a form on your website for your visitors to fill out that asks for sensitive information, such as sensitive passwords, credit card information, or personal identity data such as a social security number.
- Have a storefront where you take credit cards directly. You do NOT often need SSL if you use a third party provider, like 2Checkout or PayPal.
How to Setup SSL On Your Site
To enable SSL on your site, you need to have:
- a dedicated IP address
- an SSL certificate
The dedicated IP address costs $3.50 per month or $35.00 per year.
If you want a signed SSL certificate from us, the cost of this is $29.95 per year. This includes free installation on your shared hosting account.
You can also provide to us a certificate and key file from a previous host and we can install that as well, but you will still need the dedicated IP address.
For the SSL certificate, you can use a self signed one, but it will show a warning in the browser when someone goes to it. The contents of the transaction between the browser and the server will still be encrypted. This is usually fine for testing or non-commerce activities, but if you don't want a browser warning to show up, you will need the signed SSL certificate.
If you want to obtain an SSL certificate, we will need to convert you over to a dedicated IP. If you're using our DNS, which is most likely the case, we make this change for you automatically. If you use your own DNS service, you will have to change the IP at a time we both agree on to ensure proper functioning of your site. If you're unsure as to whether or not you use our DNS, please let us know.
If you want a signed SSL certificate and didn't register your domain directly through us, please make sure the WHOIS e-mail addresses on the domain match your current e-mail, or an e-mail you have access to.
Once you're ready to proceed and know what you need or want more information, please contact us. We'll be glad to start the process or answer any questions you may have.
