SSL from GoDaddy

[ladysaat]

I searched the forum and found some advice on it and some code. But apparently the code is already in v1.3.0 so....

Does anyone else have a turbo SSL from GoDaddy? I know I need to talk to my host about installing it. I am on chat with them now. But I wanted to know, are there any changes to things/code I need to do to make the ssl work with cart? Is it automatic?


TIA

[FluffyTigger]

It's automatic. SSL encrypt the data transmittion layer between computers, it doesn't matter what you're transfering on that layer. All you have to do is install it and allocate a unique ip, then just type in https and if you get the padlock without popup then you're all ready to go.

[ladysaat]

well I can type in the https:// but I thought the whole point of having the SSL was so that when people surfed to my site and shopped the whole thing would be secure? Right now just the first page shows up as https:// and only if you type it. It still shows up as http:// too.

I am new, as you can tell so maybe I'm confused about what SSL actually does. Like how will the customers know I have an ssl secured site if they don't type in the https://. I know I never think to type that. KWIM?

[FluffyTigger]

Shopping doesn't need to be secure, only the checkout portion where they actually enter the credit card and other information need to be. If you go to the checkout section then Zencard does switch to https automatically. Your customer will see a whole padlock if SSL have been implemented correctly for a particular page. If there are some elements that isn't transfered by SSL then you will see a broken padlock and a warning will come out.

SSL is a connection layer, whenever you type in https: the connection request goes to the server and request a secure connection. Once the connection have been established then anything sent over will be encryped based on the highest security setting that can be use between the two.

SSL is based on a public key encryption system. You generated 2 keys when you request an SSL certificate. The private key which you keep can decrypt anything by the public key and vice versa. When an SSL connection is establish your server send out the public key to the requesting browser so that they can use it to decrypt anything encrypted on the server by your private key. The browser then uses the public key to encrypt data it sent to the server that only the private key your possess can decrypt.

SSL is the mechanism through which negotiation and transferance of the public key occur behind the scene.

[ladysaat]

oh okay!

Hey was I supposed to go in and change the SSL option to enabled or 'yes' or what not?

When I initially set up the cart I didn't have an ssl cert. So I left both questions as "No"

[FluffyTigger]

Yes, I don't think there's a db key, so just changing the config files should work.