News

Do I need an SSL: Why security is critical for any online business

These days, companies simply can't skimp on information security. Any organization that deals with customers must ensure that the personal details their clients share with them remains under their control - and out of the hands of hackers awaiting any opportunity to migrate this data to their own systems.

Although news of a data breach is not surprising these days, many business leaders are still asking themselves if they need an SSL certificate to protect their online platforms. Spoiler alert! More often than not, the answer is yes.

Do I need an SSL? Questions to consider
Still not convinced? There are a few questions administrators can ask themselves to determine if their website needs encryption protection through an SSL certificate. SSL Shopper suggested examining the type of website the company has and what types of customer information they handle. Is it an ecommerce platform where shoppers input their payment card information? If so, then you definitely need an SSL certificate.

"As an online merchant, it is your responsibility to make sure the information you collect from your customers is protected," SSL Shopper stated. "This will shield you and your customers by making sure that no one can intercept and misuse their credit card information."

However, this isn't the only question to ask in these regards. Decision-makers should also look into the standards governing their industry and inquire as to if these guidelines require the use of an SSL certificate. For example, they Payment Card Industry Data Security Standards state that any company that collects, transmits or handles credit or debit card information in any fashion must have a protected environment in which to house and send this content. In this way, any organization that falls under this umbrella needs to have encryption in place to safeguard this data, which is possible through deployment of an SSL.

Overall, Network Solutions puts it simply: "If you transact business on your website, you need an SSL Certificate!"

On the other hand
SSL Shopper raises an interesting point when it comes to the use of SSL certificates, however. All organizations that touch payment card information in any way should have encryption in place, but what about those that utilize a third party to carry out their transactions?

If the website leverages another vendor - like PayPal or a similar service - to collect, store or transmit payment card details of their customers, than the website does not need an SSL. Since the third party takes care of the clients' sensitive payment information, and the company has no access to this content, they don't need encryption to protect these details.

"Just make sure none of the credit card details get entered when the address bar still shows your domain name," SSL Shopper advised.

Another scenario in need of an SSL
At the same time, though, even if you don't touch payment card details explicitly, your website could still benefit from SSL protection. Any platform that includes a login box should have encryption in place to ensure that usernames and passwords are not compromised. Instead, website operators should play it safe and deploy an SSL certificate.

Protect data in transit with an SSL certificate today.

corporate office

Thawte
The Gateway
Century Lane
Century City, 7441
Cape Town
South Africa

Postal Address:
P O Box 15986
Panorama 7500
Cape Town
South Africa

Call: +353 1 793 9141
Fax: +27 21 819 2950

Buy now! Try now!