SagePay Form vs SSL

[leg]

If I am using sagepay form do I need to get a SSL cert of my own? I have read up on PCI DSS compliance and am getting confused as to whether I will still need my own or not.

Thanks

[stevesh]

In the opinion of many here, you need an SSL cert regardless of your payment processor. I'd be surprised if Sagepay doesn't require it.

[leg]

In the opinion of many here, you need an SSL cert regardless of your payment processor. I'd be surprised if Sagepay doesn't require it.

I think this is what is confusing me. Is this because I require it as I thought sagepay took that on as the form is processed on their servers. Or is to make the customer feel more comfortable with purchasing/entering data on my site?

[stevesh]

I've never used Sagepay, but it sounds like it's a Paypal kind of thing where the customer goes to their site to pay?

If so, you shouldn't need a SSL cert, but if you're requiring customers to create accounts, many people won't give you their personal info if the page isn't secured.

[leg]

I've never used Sagepay, but it sounds like it's a Paypal kind of thing where the customer goes to their site to pay?

If so, you shouldn't need a SSL cert, but if you're requiring customers to create accounts, many people won't give you their personal info if the page isn't secured.

Yes it is a similar kind of process where they are responsible for processing the payment and the security of the users details and it is all done off my site and on their servers. Customers will still be asked to enter their details on my site though so what level do I require for that. I know dedicated SSL is preferred as it looks more professional but I can use a shared one for free. Is the free one enough just for their user details or should I splash out on the dedicated one?

Thanks for taking the time.

[stevesh]

I'd get the dedicated one. I'm not sure where you are, but here in the US, they're cheap (some free) and make your store look more professional than with a shared cert.