SSL for Ecom store

Now i am using Godaddy hosting and installed wordpress theme to build my ecom store. There are so many SSL exist in the market, i just wonder if an ecom store accept credit card, what is the basic requirement of SSL required? I found shopify only using 256-bit encryption.

Also, there are FREE SSL (DV) such as Lets encrypt (renew every 90 days) & Cloud Flare (full ssl), could this FREE SSL satisfy the basic requirement of accepting credit card? How can i check their bit encryption used for SSL?

Another question comes to how to renew the FREE SSL on Godaddy Cpanel.


Thanks a lot!

You should ask go daddy tech support. You are paying for the service, use it.

starwargift said:

i just wonder if an ecom store accept credit card, what is the basic requirement of SSL required?

Click to expand...

There are just 2 requirements for installing an SSL until last year.

1. An SSL Certificate.
2. A Dedicated IP.

Let's Encrypt can be installed on shared hosting(No dedicated IP required for each certificate) and it's free.
If you were to use Cloudflare's SSL(FREE), the data traversing between your hosting and cloudflare is not encrypted so you'll have validation problems.

You haven't mentioned which payment processor/gateway you're using to process the credit card payments and without that information, it's hard to give you correct answers.

As @HudsonWebServices suggested, you should talk to godaddy's customer support as we don't have a clue about which FREE SSL you're referring to.

The best person to talk to is Godaddy.

Yes you can buy an ssl from enom, name cheap or any other place but you will still have to go back to godaddy to get them to help install it.

Chances are the price for the ssl will be the same that you can get any place else. Just makes billing easier to keep in one place.

ninja hosting from marketplace has $1.50 hosting with free ssl you don't have to renew it or do nothing

SpoonFeeder said:

You haven't mentioned which payment processor/gateway you're using to process the credit card payments and without that information, it's hard to give you correct answers.

Click to expand...

I shall use stripe & paypal to accept payment. Is it enough for the security if i use FREE SSL such as Let's Encrypt & cloud flare?

BTW, FREE Cloud Flare SSL have 3 types, i just wonder if Origin CA is enough for the security of ecom store of accepting stripe payment or credit payment?

Full SSL
Full SSL mode provides encryption from end users to CloudFlare and from CloudFlare to your origin server. This requires an SSL certificate on your origin server. In Full SSL mode, you have three options for certificates to install on your server: one issued by a Certificate Authority (Strict), one issued by Cloudflare (Origin CA), or a self signed certificate. It is recommended that you use a certificate obtained through Cloudflare Origin CA.

Origin CA
Origin CA uses a Cloudflare-issued SSL certificate instead of one issued by a Certificate Authority. This reduces much of the friction around configuring SSL on your origin server, while still securing traffic from your origin to Cloudflare. Instead of having your certificate signed by a CA, you can generate a signed certificate directly in the Cloudflare dashboard.

Flexible SSL
Flexible SSL encrypts traffic from Cloudflare to end users of your website, but not from Cloudflare to your origin server. This is the easiest way to enable HTTPS because it doesn’t require installing an SSL certificate on your origin. While not as secure as the other options, Flexible SSL does protect your visitors from a large class of threats including public WiFi snooping and ad injection over HTTP.

starwargift said:

I shall use stripe & paypal to accept payment. Is it enough for the security if i use FREE SSL such as Let's Encrypt & cloud flare?

.

Click to expand...

I'm not sure if you're processing payments the free versions are enough, you need to check out the payment processors T&Cs as they have different levels of requirements usually.