ssl advice needed - GoFuckYourself.com

roly · 12-24-2015, 08:17 AM

i figured i would get my sites secure with ssl certificates, basically for google's benefit - i know it's not having a lot of impact currently but if they turn up the knob a bit i don't want to be impacted because i haven't made the switch. i have a couple of questions that someone might know the answer to.

i was going to use comodo at $4.99/year which seems cheap enough, am i correct in thinking that i will need one for my domain domain.com and also my mobile subdomain m.domain.com?

do i have to buy a wild card ssl certificate for this or can i just use two of the comodo $4.99 single domain ones?

any advice appreciated?

Juicy D. Links · 12-24-2015, 08:37 AM

Quote:

Originally Posted by roly

i figured i would get my sites secure with ssl certificates, basically for google's benefit - i know it's not having a lot of impact currently but if they turn up the knob a bit i don't want to be impacted because i haven't made the switch. i have a couple of questions that someone might know the answer to.

i was going to use comodo at $4.99/year which seems cheap enough, am i correct in thinking that i will need one for my domain domain.com and also my mobile subdomain m.domain.com?

do i have to buy a wild card ssl certificate for this or can i just use two of the comodo $4.99 single domain ones?

any advice appreciated?

the cheap one wont work on "1.site.com" you will need the Wildcard SSL

Sly · 12-24-2015, 08:39 AM

You will need a wildcard for your subdomains.

Give this a try to save some cash, the wildcard ones can get expensive.

https://letsencrypt.org/

roly · 12-24-2015, 09:29 AM

Quote:

Originally Posted by Juicy D. Links

the cheap one wont work on "1.site.com" you will need the Wildcard SSL

thought that might be the case, thanks

roly · 12-24-2015, 09:33 AM

Quote:

Originally Posted by Sly

You will need a wildcard for your subdomains.

Give this a try to save some cash, the wildcard ones can get expensive.

https://letsencrypt.org/

i did see that from one of your earlier posts after i posted this. looks good, i only need it for google, i only have contact forms. i will give it a try. have you tried it yet? do all browsers recognise it as a legit certificate?

Sly · 12-24-2015, 10:03 AM

Quote:

Originally Posted by roly

i did see that from one of your earlier posts after i posted this. looks good, i only need it for google, i only have contact forms. i will give it a try. have you tried it yet? do all browsers recognise it as a legit certificate?

We just set up an instance of it and it looks good on all my tests so far.

incredibleworkethic · 12-24-2015, 10:07 AM

Sly and his team at Vacares (tell them I sent you) got me setup on a dedicated server months ago and it's been great every day it's been up!

I'm not just plugging him "just because". I recently setup an SSL on my domain and his support team has been there for me (and him, himself) whenever I needed him.

Pleased thus far. Thanks Sly.

shiraz9944 · 12-24-2015, 10:11 AM

might as well just do it now and get ahead of it, just in case. It's probably more likely to be a factor nowadays.

roly · 12-24-2015, 10:17 AM

Quote:

Originally Posted by Sly

We just set up an instance of it and it looks good on all my tests so far.

thanks, i'll give it a go.

3xmedia · 12-24-2015, 10:36 AM

Quote:

Originally Posted by incredibleworkethic

Sly and his team at Vacares (tell them I sent you) got me setup on a dedicated server months ago and it's been great every day it's been up!

Is your server fully managed?

Sly · 12-24-2015, 10:48 AM

Quote:

Originally Posted by 3xmedia

Is your server fully managed?

Absolutely.

mlove · 12-24-2015, 12:09 PM

One thing to consider - if you're running a high-bandwidth site that utilizes a CDN, if your ssl site is loading resources over http, your users will receive a warning about the connection not being completely encrypted. Additionally, deploying a CDN site with SSL is usually very expensive.

incredibleworkethic · 12-24-2015, 12:29 PM

Good point. I also had to replace http references through my content. Seems to be alright and shows secure. Also Google has indexed my https version. I perma redirected everything too.

12-24-2015, 08:17 AM	#1
roly Confirmed User Join Date: Aug 2002 Posts: 1,844	ssl advice needed i figured i would get my sites secure with ssl certificates, basically for google's benefit - i know it's not having a lot of impact currently but if they turn up the knob a bit i don't want to be impacted because i haven't made the switch. i have a couple of questions that someone might know the answer to. i was going to use comodo at $4.99/year which seems cheap enough, am i correct in thinking that i will need one for my domain domain.com and also my mobile subdomain m.domain.com? do i have to buy a wild card ssl certificate for this or can i just use two of the comodo $4.99 single domain ones? any advice appreciated?

12-24-2015, 08:39 AM	#3
Sly Let's do some business! Industry Role: Join Date: Sep 2004 Location: Austin, TX Posts: 31,322	You will need a wildcard for your subdomains. Give this a try to save some cash, the wildcard ones can get expensive. https://letsencrypt.org/ __________________ Vacares - Web Hosting, Domains, O365, Security & More - Paxum and BTC Accepted Windows VPS now available Great for TSS, Nifty Stats, remote work, virtual assistants, etc. Click here for more details.

12-24-2015, 12:09 PM	#12
mlove the guy Industry Role: Join Date: Apr 2005 Posts: 764	One thing to consider - if you're running a high-bandwidth site that utilizes a CDN, if your ssl site is loading resources over http, your users will receive a warning about the connection not being completely encrypted. Additionally, deploying a CDN site with SSL is usually very expensive. __________________ If you won't feel as good, I won't feel as cheap.

12-24-2015, 10:07 AM	#7
incredibleworkethic Confirmed User Industry Role: Join Date: Sep 2009 Posts: 2,302	Sly and his team at Vacares (tell them I sent you) got me setup on a dedicated server months ago and it's been great every day it's been up! I'm not just plugging him "just because". I recently setup an SSL on my domain and his support team has been there for me (and him, himself) whenever I needed him. Pleased thus far. Thanks Sly.

12-24-2015, 10:11 AM	#8
shiraz9944 Confirmed User Join Date: Jan 2002 Posts: 567	might as well just do it now and get ahead of it, just in case. It's probably more likely to be a factor nowadays.

12-24-2015, 12:29 PM	#13
incredibleworkethic Confirmed User Industry Role: Join Date: Sep 2009 Posts: 2,302	Good point. I also had to replace http references through my content. Seems to be alright and shows secure. Also Google has indexed my https version. I perma redirected everything too.