Paypal and SSL?

milauskasmilauskas
edited April 2013 in Shopping Cart plugin
Hi,

If I use paypal to accept payments do I need SSL? Just wondering. Doesn't paypal take you to their own site to make the payment or am I wrong?

Comments

  • 1 Comment sorted by
  • Vote Up0Vote Down
    philphil
    edited April 2013
    Hi milauskas,

    Thanks for contacting us.

    For the actual payment process itself you don't need SSL since, as you said, the customer is whisked off to PayPal's own payment page (with SSL) to make payment there.

    HOWEVER, there have been instances where orders have shown up in the Shopping Cart plugin's orders history as "Not Paid" when they have indeed been paid via PayPal, when using PayPal (Website Payments Standard) as payment method.

    There can always be more than one reason for that, but the most common reason is that, once payment had been made, when being transferred back to the merchant's website, customers had encountered a Javascript warning that they are navigating from a secure location (https - PayPal) to an insecure location (http - the merchant's site).

    What often happens then is they are unsettled by the notice and hesitate to click the "OK" button to accept the warning. In the meantime the merchant's site loads beneath the popup warning, but the payment information from PayPal is not recorded.

    So I guess that was my long-winded way of saying that it's probably better to get SSL for your site, than not. We have a very good extension plugin that switches your site to SSL for the order process, called One Click SSL, and it can be purchased here:

    http://tribulant.com/extensions/view/15/one-click-ssl

    It costs $20.00, but we have a special on until the end of April whereby you can apply a 30% discount to your order by using the discount coupon code "EASTER" (without quotes) in the shopping cart during the checkout process on our site.

    I should mention, of course, that you also need to purchase an SSL certificate and install it on your hosting server. You web host should be able to assist you with the installation. Just a heads up - some hosts like GoDaddy do not allow SSL certificates purchased from sources other than themselves.

    I hope this helped somewhat, milauskas? Please let us know, I look forward to your reply.

    Kind regards,

    Phil
Sign In or Register to comment.