SSL Certificates
In today's security conscious world, we are seeing "https everywhere" more and more. The https protocol encrypts the communications between your browser and the website you are visiting. While search engines now favor https protected websites, you don't absolutely need an SSL certificate unless you support one of the following instances:
- accept or process credit cards online
- have a login where sensitive information is stored
- processing sensitive, personal data (laws such as HIPPA)
- complying with privacy or security requirements
- secure email, VPN, FTP, webmail, etc.
- wish to prove trust to your visitors
The SSL certificate types currently available from a variety of providers are explained as follows:
- DV - Domain validation SSL Certificates: where the Certification Authority checks that the applicant is the registrant of the domain name. Only the domain name, not the business name is included in the certificate details.
- OV - Organization validation SSL Certificates: where the Certification Authority checks the right of the applicant to use a specific domain name PLUS it conducts some vetting of the organization and typically has a higher insurance level than DV certificates. Generally, they validate that the organization is legally registered and active and that the address and phone number are correct, but each registrar has its own specific validation procedures and they may do more than that.
- EV - Extended Validation SSL Certificates (green URL bar): where the Certification Authority checks the right of the applicant to use a specific domain name PLUS it generally conducts a more thorough vetting of the organization that meet established standards. It also typically has a higher insurance level than OV certificates. Like the OV certificate, it is specifically designed to prevent phishing attacks, but does so according to industry agreed standards. Specifically, they validate that the organization is legally registered and active, the address and phone number are correct, the organization has exclusive rights to use the domain, the person ordering the certificate has authorization to do so, the organization is not on any government blacklists. Here are the standards: http://cabforum.org/documents.html
- Free Certificates: These certificates don't verify who you are in any of the above ways, but they do provide encrypted communication between your browser and the website you are visiting.
ICG Link customers who use our secure server feature have the benefit of using their own certificate that we can help purchase or our shared EV certificate. If you have any questions about the options, please give contact us for more information.
Tags: Security, SSL