answered question
answers (3)
As a norm the price fluctuation deals with added-value options, not with the baseline functionality. The cheapest SSL certificate that you can get will provide the same protection as the most expensive SSL certificate with the same specifications.
Part of the problem is who is selling it to you. You get a certificate from one of the top three providers, everyone knows them so there is an implied trust. You get a certificate from a reseller (like myself, my micro registrar http://gopedro.net has ssl certificates) and you get the same product, but not the same add-ons.
The second thing you have to deal with is that certificates with wildcards cost more. A certificate that only works on one machine, for one domain, is much cheaper than a certificate that applies to any iteration of mydomain.com. That said, you should not pay for a wilcard certificate if you only need to protect www.mydomain.com , all that you are doing is wasting money.
The nicer SSL providers will give you a widget that users can use to instantly confirm that you are who you say you claim to be.
Also, from professional experience, I can tell you that some of the bigger providers are really strict about selling these, because the certificate implies that they verified your identity. Don't be alarmed when they start asking you for proof of identity, and things like that. This is just the way they work.
Compare that to my micro registrar business, which will sell you any Thawte certificate that you need, but honestly doesn't care about who you are. All it cares is that your domain communications are protected. With a more expensive registrar, you are getting both the protection, and the promise that they will tell your users that yes, they verified your identity.
In summary, you are looking at two things:
1. How many machines/subdomains do you need to protect?
2. Are you interested in just the protection? Or do you want to go through the identity verification process?
Part of the problem is who is selling it to you. You get a certificate from one of the top three providers, everyone knows them so there is an implied trust. You get a certificate from a reseller (like myself, my micro registrar http://gopedro.net has ssl certificates) and you get the same product, but not the same add-ons.
The second thing you have to deal with is that certificates with wildcards cost more. A certificate that only works on one machine, for one domain, is much cheaper than a certificate that applies to any iteration of mydomain.com. That said, you should not pay for a wilcard certificate if you only need to protect www.mydomain.com , all that you are doing is wasting money.
The nicer SSL providers will give you a widget that users can use to instantly confirm that you are who you say you claim to be.
Also, from professional experience, I can tell you that some of the bigger providers are really strict about selling these, because the certificate implies that they verified your identity. Don't be alarmed when they start asking you for proof of identity, and things like that. This is just the way they work.
Compare that to my micro registrar business, which will sell you any Thawte certificate that you need, but honestly doesn't care about who you are. All it cares is that your domain communications are protected. With a more expensive registrar, you are getting both the protection, and the promise that they will tell your users that yes, they verified your identity.
In summary, you are looking at two things:
1. How many machines/subdomains do you need to protect?
2. Are you interested in just the protection? Or do you want to go through the identity verification process?
| Asker's rating: |
thanks for the good feedback!
SSL certificates are a good way to build trust with potential and repeat customers.
Technically, a basic SSL certificate only ensures that a the contact information of the registered website owner is correct. Advanced SSL certificates ensure that the site is as secure as possible and will even offer a guarantee (insurance) against a specific number of hacks.
All of the choices that you've found lie between these 2 drastically separated endpoints of SSL certificates.
The decision about what you need really depends on your products and your infrastructure. For example, are you a network and programming security pro or have you enlisted the help of one? If so, your site will not benefit from a high end certificate.
Some potential customers will view your SSL certificate and would like to be able to recognize the company that it came from. A bit of "hacker proof" insurance goes a long way. These are two components that can help you increase the trust that users have in your site. More trust = more sales.
I recommend that you view the charts available here:
http://www.sslshopper.com/ssl-certificate-wizard.html
On the low end, Godaddy provides the cheap SSL certificates. Many hosting companies also offer discount SSL certificates.
However, if you think about cost alone, you're really missing the point of an SSL certificate.
Technically, a basic SSL certificate only ensures that a the contact information of the registered website owner is correct. Advanced SSL certificates ensure that the site is as secure as possible and will even offer a guarantee (insurance) against a specific number of hacks.
All of the choices that you've found lie between these 2 drastically separated endpoints of SSL certificates.
The decision about what you need really depends on your products and your infrastructure. For example, are you a network and programming security pro or have you enlisted the help of one? If so, your site will not benefit from a high end certificate.
Some potential customers will view your SSL certificate and would like to be able to recognize the company that it came from. A bit of "hacker proof" insurance goes a long way. These are two components that can help you increase the trust that users have in your site. More trust = more sales.
I recommend that you view the charts available here:
http://www.sslshopper.com/ssl-certificate-wizard.html
On the low end, Godaddy provides the cheap SSL certificates. Many hosting companies also offer discount SSL certificates.
However, if you think about cost alone, you're really missing the point of an SSL certificate.
I like Godaddy.com and its SSL Certificate. Its is easy to use, they are available 24 hours a day and they go out of their way to help you do a proper install. And it is only $29.99/year for their starter. And I am sure everybody has heard of godaddy.com.
If you were getting more serious then there are thawte.com and hackerproof.com. Objective is solved and any one of them.
That is what i recommend for my clients.
If you were getting more serious then there are thawte.com and hackerproof.com. Objective is solved and any one of them.
That is what i recommend for my clients.
Related questions
140 characters left
ask any question
