Results 1 to 4 of 4
  1. #1
    Join Date
    Sep 2004
    Posts
    64
    Plugin Contributions
    0

    Default SSL for the whole site???

    What if one has the whole thing as https????

    I was thinking about that...and maybe an index.html with a quick redirect to the https...
    this way the whole website is under a secure connection...
    does that makes sense???

    I know that https is a bit slower...but wouldn't that be worth it ???

  2. #2
    Join Date
    Jun 2003
    Posts
    33,715
    Plugin Contributions
    0

    Default Re: SSL for the whole site???

    Simple answer- no, do not run the whole application under HTTPS.
    Please do not PM for support issues: a private solution doesn't benefit the community.

    Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

  3. #3
    Join Date
    Sep 2004
    Posts
    745
    Plugin Contributions
    4

    Default RE: SSL for the whole site???

    We actually run a site that requires all pages be secure after login since we need to securely collect and process personal information on the site www.divorceonyourterms.com for document preparation services. It is really not at all hard to modify Zencart to support this capability. Just thought I'd pass our experience along. If anyone is interested in doing this I'd be glad to share our experiences in this area.

    Best of luck!
    Jeff

  4. #4
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: SSL for the whole site???

    This is not a report of a hack attempt. Thus, moving this discussion to General Questions
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. How to enable SSL for the whole site during customers log in?
    By akidworld in forum Installing on a Linux/Unix Server
    Replies: 27
    Last Post: 8 Apr 2010, 04:49 AM
  2. making the whole site SSL
    By streak in forum General Questions
    Replies: 9
    Last Post: 15 Dec 2008, 07:13 PM
  3. Redirect whole site to SSL
    By dasonix in forum General Questions
    Replies: 2
    Last Post: 23 Apr 2007, 12:36 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR