auto-ssl or buy an ssl?

[ricco]

Hi so i read ina topic here that if you have Cpanel you can get auto-ssl for free, is that right or do I go ahead find a cheap place to get an ssl for my one site which will have usr login's..

[WhitelabelIT]

if you are not going to have people paying stuff on your site, I don't see why not with the auto SSL

[ricco]

if you are not going to have people paying stuff on your site, I don't see why not with the auto SSL

No payments will be made, it's for a amateurs tube site where there will be login data. So what is the difference in auto or regular ssl please.

[WhitelabelIT]

if you are not going to have people paying stuff on your site, I don't see why not with the auto SSL

No payments will be made, it's for a amateurs tube site where there will be login data. So what is the difference in auto or regular ssl please.

Auto SSL doesnt need a dedicated IP address, regular SSL do. Auto SSL only works for 1 domain and you have to verify it by domain verification in your case, they only last for 90 days too but the renew automatically. but they both provide the same encryption, auto SSL's are signed by comodo.

Things Auto ssl wont give you are for exampke being able to cover a few domains under 1 certificate and the
Ability to secure multiple sub-domains under one SSL. if you get a purchased SSL with a wild card you would be able to cover multiple sub-domains. and a warranty, since its free.

[HeidiHoe]

if you are not going to have people paying stuff on your site, I don't see why not with the auto SSL

No payments will be made, it's for a amateurs tube site where there will be login data. So what is the difference in auto or regular ssl please.

Auto SSL doesnt need a dedicated IP address, regular SSL do. Auto SSL only works for 1 domain and you have to verify it by domain verification in your case, they only last for 90 days too but the renew automatically. but they both provide the same encryption, auto SSL's are signed by comodo.

Things Auto ssl wont give you are for exampke being able to cover a few domains under 1 certificate and the
Ability to secure multiple sub-domains under one SSL. if you get a purchased SSL with a wild card you would be able to cover multiple sub-domains. and a warranty, since its free.

AutoSSL will secure www as well as naked and since they're free you could technically stick a cert on as many hosted subs as you like thus avoiding the pricey purchase of a wildcard SSL. WhitelabelIT is right, what you won't get is a warranty. So if a surfer sues you because their personal data was stolen after shopping on your site you won't be covered up to whatever amount the warranty is for. If you buy a cheap SSL it's domain verification only, the same verification that you'll get with AutoSSL. Amount of warranty usually varies depending on how much you pay for the SSL. I guess you could look at warranty the same as insurance. Do you really need it for what you are doing?

Dedicated IP used to be a requirement for domain verification SSL, however I don't think that's the case any longer. The last SSL I had purchased from GoDaddy was used on a domain without a dedicated IP. I've also had one of their UCC/SAN SSL (1 cert, multiple domains) in the past to reduce cost and I was not thrilled with it. Reason is www wasn't automatically covered and redirect can be tricky causing "not secure" warning pages in certain circumstances. All SSL really does is encrypt the data. It doesn't mean the site is reputable. Most surfers don't realize that. AutoSSL does that and before the 90 days are up it auto-renews. Set it, forget it and reap the google praise. Why pay for it?

On the other hand, if you do process payments on your site (I'm not talking about having a cart and sending them to your payment processor's checkout page) you might want to consider getting an OV SSL. Organizational verification gives you the green bar, is supposed to convey trust and usually provides you with a warranty. These certs are pricey.

[ricco]

wowzy now I am more confused than this morning. Thanks to whitelabelit and heidihoe for the inputs but this is too much for me to decipher. In 2 words what do you suggest I get.

[HeidiHoe]

wowzy now I am more confused than this morning. Thanks to whitelabelit and heidihoe for the inputs but this is too much for me to decipher. In 2 words what do you suggest I get.

the answer is....drumroll please....
AutoSSL

[bill]

but SSL if you have a membership site or store or forum or any site where people leave their information that they dont want stolen?

[HeidiHoe]

but SSL if you have a membership site or store or forum or any site where people leave their information that they dont want stolen?

AutoSSL is domain verification SSL without a warranty attached. It's encrypted, it works and should be sufficient in most cases. Only you know what you need and feel comfortable with.

[fantastico]

This was very good to know, I now know the pros and cons of both, thanks guys.

[WhitelabelIT]

wowzy now I am more confused than this morning. Thanks to whitelabelit and heidihoe for the inputs but this is too much for me to decipher. In 2 words what do you suggest I get.

I would agree 100% with HeidiHoe, both with all she said and also with her ultimate answer to your question. in 2 words Auto-SSL. you mentioned you wouldn't have people buying anything or putting card info or anything like that. Just for the log in info Auto-SSL encryption should be enough.

[jag]

If you get the autossl from the cpanel then when you move you will have to get anew one from the new host, if you pay for your ssl certificate it is yours

[HeidiHoe]

If you get the autossl from the cpanel then when you move you will have to get anew one from the new host, if you pay for your ssl certificate it is yours

True but you could just get a new cert if you still have cPanel. Or you could use LetsEncrypt.org. It works just as well. It can be installed in cPanel (if you prefer using LE), some host offer it in control panels other than cPanel, or you can install an auto updater yourself. Check their site for info. There's also free LE cert monitoring sites that will notify you when it's time to update the certs if auto updater isn't an option for you. Check out sslforfree.com.

[HeidiHoe]

It can be installed in cPanel (if you prefer using LE)....

Did i say cpanel? Second thought its probably in the WHM part of the setup. Look for the module... its somewhere logical... software area, around there somewhere. If you go to cpanel help you'll find info by searching for letsencrypt and i think there's info on their blog as well. Once module is installed you just select it instead of comodo in the AutoSSL settings.

Comodo is probably your better option since LE limits number of certs in a given time limit. Limit imposed is generous enough when it shouldn't cause an issue and LE is a great freebie option if you don't have cpanel of prefer not to use comodo for whhatever reason.

[nudelinks]

Next thing I do is google Comodo, thanks for the hint.