OpenCart 1.4.x and SSL

Daniel,

Are you limiting the SSL to only the domain now? no possibility for the shared environment anymore?

There never was support for shared. but I think he did say it would be global and per-store

neschalk wrote:Daniel,

Are you limiting the SSL to only the domain now? no possibility for the shared environment anymore?

Because the way cookies work there has never been shared SSL support. also shared SSL is hardly ever going to be secure when you are sharing an install. to be honest if you \are running a ecommerce business you should have your own SSL. this sort of thing is not expensive for a business.

Daniel wrote:

neschalk wrote:Daniel,
if you \are running a ecommerce business you should have your own SSL. this sort of thing is not expensive for a business.

No necessarily so Daniel. Some are start up businesses (that obviously are looking for the most cost effective way to start) having to purchase an SSL certificate is not inexpensive when you run a small e-commerce business and makes the costs fairly prohibitive for some.

cmebd wrote:

Daniel wrote:

neschalk wrote:Daniel,
if you \are running a ecommerce business you should have your own SSL. this sort of thing is not expensive for a business.

No necessarily so Daniel. Some are start up businesses (that obviously are looking for the most cost effective way to start) having to purchase an SSL certificate is not inexpensive when you run a small e-commerce business and makes the costs fairly prohibitive for some.

if $30 is cost prohibitive then you probably shouldn't be running an ecommerce store.

Xsecrets wrote:
if $30 is cost prohibitive then you probably shouldn't be running an ecommerce store.

OK where do you buy a $30 SSL certificate that is worth anything? AND don't get personal in your responses - not good practice on a public forum. Don't bother answering if you have nothing of value to offer!!

cmebd wrote:OK where do you buy a $30 SSL certificate that is worth anything?

Versus what? I believe my work pays $45/year through our host for a 256-bit SSL certificate registered to our domain. It's not extended validation (which is a lot more expensive) but customers are demanding that yet.

GoDaddy has a basic SSL certificate that is very cheap and even comes free with it's shared hosting.

If you are concerned about a cheap SSL certificate being worth anything you might also have to ask what shared SSL certificates are worth. Even less.

Clearly this should not be a problem.

cmebd wrote:

Xsecrets wrote:
if $30 is cost prohibitive then you probably shouldn't be running an ecommerce store.

OK where do you buy a $30 SSL certificate that is worth anything? AND don't get personal in your responses - not good practice on a public forum. Don't bother answering if you have nothing of value to offer!!

Check out OpenSSL for a free SSL cert...

I got a free SSL from namecheap. comes with free domain

To get opencart to work accross shared ssl domain names would mean i would need to store the sessions in the DB. I like to keep things simpel and not have to drag the db class into the session class.

cmebd wrote:

Xsecrets wrote:
if $30 is cost prohibitive then you probably shouldn't be running an ecommerce store.

OK where do you buy a $30 SSL certificate that is worth anything? AND don't get personal in your responses - not good practice on a public forum. Don't bother answering if you have nothing of value to offer!!

It's true tho
And GoDaddy ssls are sub-$20 and they work fine

Qphoria wrote: It's true tho
And GoDaddy ssls are sub-$20 and they work fine

I haven't looked today, but I've installed a couple of GoDaddy SSL my hosting clients have bought at $9.95USD.

You will need a dedicated IP, as well, usually in the $20 per year range, so $30 per year, overall. If you don't have that you have no business being in business.

Amen

My host offers a free dedicated ip for one domain. I use their reseller service so I can host unlimited sites for $12/mo. They are great and support is excellent

So hosting and security should be the easiest things to afford

Daniel wrote:To get opencart to work accross shared ssl domain names would mean i would need to store the sessions in the DB. I like to keep things simpel and not have to drag the db class into the session class.

Thanks Daniel, appreciate the information.

Because this discussion should be in its own topic I've split all the relevant replys from the OpenCart 1.4.2 topic and moved it here.

cmebd wrote:

Daniel wrote:

neschalk wrote:Daniel,
if you \are running a ecommerce business you should have your own SSL. this sort of thing is not expensive for a business.

No necessarily so Daniel. Some are start up businesses (that obviously are looking for the most cost effective way to start) having to purchase an SSL certificate is not inexpensive when you run a small e-commerce business and makes the costs fairly prohibitive for some.

The opencart software is free, you can run it on a shared host for $5 a month. How cheap do you want it?

At $30 a year for an ssl its hardly bank busting. The only people this will effect is kids selling pirated ebooks and music with an online store. I hardly think $30 will bother any individual never mind a start-up business with a nice fresh business loan.

Ok, I think it's safe to say we are all in support of dedicated ssl, (and it's advantages/security/etc.) I guess my point is that, regardless of what we may prefer, there are many people out there on shared hosting (and vhosts) that want an easy store to work with but don't want to change their hosting.

So dedicated SSL = best option. Shared SSL = an option that 'could' be.

I really hate to push these clients into zen-cart/os-commerce. If this is out all together as a future possibility that's fine (and understandable.) If its a module that can be built that would be pretty sweet. I know a few of us here would love to send the clients into your environment.

There is a shared ssl mod on the forums somewhere.