Does the SIM version require SSL? I don't really understand the differences between the AIM & SIM version, and which is "better" to use, and why.
Does the SIM version require SSL? I don't really understand the differences between the AIM & SIM version, and which is "better" to use, and why.
AIM requires SSL.
SIM in "offsite" mode does not require SSL, but should be avoided IMO.
If your question is really "can I get away without an SSL certificate", the right answer is: are you collecting any information about your customers? If so then yes, you need an SSL certificate. And, since the answer *is* yes, then ... yes, you should get an SSL certificate.
They're not as expensive as they used to be, and are a worthwhile investment.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.