Do I need to enable SSL when using Google Check Out?

[speedcreed]

I have my SSL certificate set up and so Google Checkout production mode is working- so do I still need to enable SSL in Zen Cart as described in the tutorial at the following:

https://www.zen-cart.com/tutorials/index.php?article=14

I'm thinking that doing so will merely add the "S" to http when new customers go to my log in/registration page ... Is that correct? Or is enabling SSL in Zencart redundant when using Google Checkout as opposed to integrated credit card processing? Advice much appreciated.

Thanks,
Tony

[gobrinton]

I think Google Checkout requires it to be used in the callback URL.

For general use, you don't have to have it on, but it is strongly recommended and highly advisable. You will likely lose customers and sales if you do not have it on. Here's why...

It does more than simply add the "S" to the URL. It completely encrypts all text that goes to and from any pages which are called up using the S in the address prefix. Without it, it is not only possible, but quite easy for hackers and thieves to intercept and read that text using modified packet sniffer software. Educated customers specifically look for that little S on certain pages before they begin to type in their personal information. If it is not there, they run for the hills. (I finally got into the habit of looking for it on certain websites.)

You do not need to use it on pages that do not contain or transmit personal information. So, product descriptions and general info pages don't really need it because it will only serve to slow down the load-times for those pages.

Hope this helps.

[speedcreed]

Thank you- extremely helpful and sound advice ( glad that, at least, New Zenners are helping others less knowledgable...).

And a quick follow-up:

You do not need to use it on pages that do not contain or transmit personal information. So, product descriptions and general info pages don't really need it because it will only serve to slow down the load-times for those pages.

So how do I make SSL page specific (log-in/sign-up page only)? I don't recall seeing that mentioned (how to accomplish it, that is) in the article on the tutorials page.

Thanks again

[yellow1912]

It is done automatically when you enable ssl.

[speedcreed]

Thanks!