Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

Hii, The site is technically a foundation, a non profit organization website, which will allow people to make donations for the cause. Is purchasing an SSL certificate for this site a good idea? How much will it cost?

share|improve this question
add comment

migrated from stackoverflow.com Dec 15 '10 at 16:02

This question came from our site for professional and enthusiast programmers.

9 Answers

It all depends on how you set it up. If you use PayPal and have visitors go to the PayPal website to enter their credit card number, you do not need an SSL certificate. But if you have visitors enter their credit card number directly on your site, you absolutely need an SSL certificate. Certificates can cost from $10 to $1500 dollars depending on the type and who you get them from.

share|improve this answer
1  
+1 — if nothing confidential (like payment credentials) is entered on a page served over HTTP or submitted to a page served over HTTP then you are fine. –  Quentin Dec 16 '10 at 7:55
add comment

If you are going to handle money, you should use encryption.

That means SSL certificates.

As for costs - see this question and answers on webmasters.

share|improve this answer
add comment

Yes...you should have a certificate for such a site. If you are taking donations directly then you should go for a highly secure certificate. Otherwise, for paypal, you can have a standard certificate, because even paypal recommends to have a ssl installed. The cost will depend upon your need. I got it from rapidsslonline.com. You can check out the same.

share|improve this answer
add comment

The short answer: NO.

The long answer:

If You are only going to redirect them to some third party site (PayPal or something) to collect donations, there is little need to have a SSL certificate. If You publish a bank account and ask to make a transfer, there is little need too.

You should have a SSL certificate if You ask someone to send important/private (credit cards numbers, addresses, phone numbers) data.

share|improve this answer
add comment

Even though it is a donation site, you must professionally setup the site so that it does not look like a bogus site. Therefore, I still believe you still need to have SSL, regardless of whether you are using PayPal or not.

In case you like to purchase an SSL, you can try http://domreg.asphostserver.com. Please remember that it is far more important to have a professionally secured site, rather than to save $60.00 per year for SSL.

:-)

share|improve this answer
    
I would be wary of getting an SSL certificate from an unknown company. There are plenty of well-established web hosts that provide SSL certificates at far below that cost, and these are known to be from recognized CAs. Also, that site seems a bit sketchy. Their web server isn't well-configured and, and they have no contact phone number and a gmail-based email address. –  Lèse majesté Dec 16 '10 at 12:32
add comment

If your not expecting to make much in donations, it maybe worth considering using a 3rd party website (paypal and others) to deal with payment handling. It's free to set up (although they take a small cut of each payment), but you don't have to worry about SSL or any other technical or security administration other than setting it up, which is easy to do.

share|improve this answer
add comment

If you process the credit card details you will need to conform to the PCI DSS standards which state that you need to encrypt the payment communications. It is cheaper and more secure to use a third party like PayPal if you are not making many transactions.

share|improve this answer
add comment

It is consistently acceptable to have an SSL certificate, as this will encrypt aware user information, although it shouldn't be appropriate in your case, unless you are manually charging the donations.

share|improve this answer
add comment

Yes. SSL certificates are very important to gain trust from your user's who visit your website, and this helps in growing your business

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.