TulipTools Internet Business Owners and Online Sellers Community

I was shopping along on a Zen Cart site tonight I had checked out in the past, ready to spend a couple hundred bucks. There was a Comodo SSL "Secured By" logo at the bottom of the site, so I thought nothing of it. I added a couple items to my cart, then decided to check the shipping rates. What did I find? No SSL in use on any checkout, registration, or credit card entry pages.

My question was, what if I was just to trust that it was secure, and any hacker that has found out it isn't monitors their hack of that database? How many would never even think because they have never read the industry standard credit card compliance agreements on site security?

The real question... would I have noticed if I hadn't been long educated in what an SSL secured page was?

I guess with the economy in the tank, they just didn't want my business. :-\

Quote:No SSL = Lost business

I tried telling Elghetto that on another thread and he ignored my advice.

Quote:There was a Comodo SSL "Secured By" logo at the bottom of the site,... What did I find? No SSL in use on any checkout, registration, or credit card entry pages.

That's fairly common on many small Zen Cart and osCommerce sites...they buy an SSL certificate and install it (or pay someone to install it) and then forget to change the cart config files to use SSL.

If you can't afford an SSL certificate you shouldn't bother opening a website and you should stick to entering contests and playing games on rinky dinks like Alsoshop.

Notice the Adsense ads:
[url=http://www.google.com/search?q="ssl certificate"]http://www.google.com/search?q="ssl certificate"[/url]

GlobeSSL $11.99
Register.com SSL $12.67
GoDaddy SSL $12.99

edit: Namecheap has RapidSSL certs for $9.95. 

According to a Verisign white paper, "86% of online shoppers feel more confident about entering personal information on sites using security indicators, such as trustmarks [trustmark=ssl seal]"

Verisign's white paper however fails to make a convincing case why any merchant should spend $995 for a Verisign EV SSL when GoDaddy offers EV certificates for $99 ($74.99 per year if you buy a 2 yr certificate).

Quote:Notice the Adsense ads:
http://www.google.com/search?q="ssl certificate"

GlobeSSL $11.99
Register.com SSL $12.67
GoDaddy SSL $12.99

edit: Namecheap has RapidSSL certs for $9.95. 

After noticing the AdSense SSL ads it might be a good idea to consult this list and this list to make sure the root certificates the SSL uses are supported