Login Form


Board index » Loaded Commerce Support » Security Issues

All times are UTC - 5 hours




Post new topic Reply to topic  [ 5 posts ] 
Author Message
 Post subject: HTTPS - SSL - Security - The site's security certificate is
PostPosted: Thu Apr 05, 2012 1:43 am 
Offline
CRE Freak

Joined: Mon Oct 26, 2009 8:20 am
Posts: 60
I dont have an SSL Certificate for my store.
How can i turn SSL off on my store for now ?
I keep getting this error message: ( see attached )
Customers are unable to get onto the site at times

Thanks
Ben


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
 Post subject: Re: HTTPS - SSL - Security - The site's security certificate is
PostPosted: Thu Apr 05, 2012 5:02 am 
Offline
CRE Freak

Joined: Mon Oct 26, 2009 8:20 am
Posts: 60
ok i have figured this one out..

In includes/config.php i made ssl = false.


Top
 Profile  
 
 Post subject: Re: HTTPS - SSL - Security - The site's security certificate is
PostPosted: Fri Apr 06, 2012 9:54 am 
Offline
CRE Legend

Joined: Sun Nov 09, 2003 1:00 am
Posts: 7328
Location: Baconton, GA USA
Once again, I strongly recommend all store owners to have their own SSL certificates in place and keep them current.

David

_________________
My CRE Loaded FAQ List
CRE Loaded osCommerce Hosting
PCI Compliant Semi Dedicated Hosting Services


Top
 Profile  
 
 Post subject: Re: HTTPS - SSL - Security - The site's security certificate is
PostPosted: Fri Apr 06, 2012 1:29 pm 
Offline
CRE Legend
User avatar

Joined: Thu Jun 12, 2008 6:39 am
Posts: 3170
Location: New Zealand
I'd add that SSL certs:

1. AREN'T just used for payment data scrambling - anytime information is entered into a form (eg a new account, contact us, customer AND admin logins) if you're not using an SSL, you're sending it plain text. Nowadays, ID fraud is worth $$$

2. You'll also get the same Chrome warning message from the OP if you're trying to access eg cPanel, webmin etc which run under different ports. This doesn't mean it's insecure. Usually these facilities will have self-signed ssl certs which aren't the same as your purchased domain SSL.

Simon

_________________
www.codemehappy.com
No PMs thanks - link in signature below.
For Cre Loaded Commerce tips, quotes on coding work, free how-to articles


Top
 Profile  
 
 Post subject: Re: HTTPS - SSL - Security - The site's security certificate is
PostPosted: Mon Apr 23, 2012 3:08 pm 
Offline
CRE Legend

Joined: Sun Nov 09, 2003 1:00 am
Posts: 7328
Location: Baconton, GA USA
I quite agree with most of that. As a host we feel it is very important to have valid commercial SSL's on every hosting panel.

The wild cards are cheap enough that there really is no reason for us not to do so. Only reason we don't use them to offer "free shared ssl" is that it would cost our clients a lot in terms of sales lost to lack of clarity about their domain ownership.

The 25% increase touted by the SSL industry for having your own SSL is, in my experience , considerably
under stated.

David

_________________
My CRE Loaded FAQ List
CRE Loaded osCommerce Hosting
PCI Compliant Semi Dedicated Hosting Services


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

Board index » Loaded Commerce Support » Security Issues

All times are UTC - 5 hours


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
It is currently Sun May 19, 2013 1:11 am
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group