SSL Certificates for websites covered by DSL?

joeypesci

Does anyone know if the purchase of SSL Certificates are covered by the distance selling reg? Or would they be classed as a custom item so not covered?

leemoss

I don't really know the answer myself, but it was an interesting question so had a quick Google. I would have thought they weren't covered by the distance selling regs but I may be wrong.
Heres more info I found (which you might have seen anyway)
http://www.webhostingtalk.com/showthread.php?t=996243

joeypesci

Yeah ran into that on my search. Thing is, a lot of them seem to be saying "Put in your T&C and you're covered" but Trading Standards, last time I made a claim, said T&C aren't always accurate or legal. As the company I dealt with over a NAS drive wanted a restocking fee, which was stated in their T&C but this T&C was against the DSR so was void.

Trouble is, I think a SSL certificate is a custom item as it's for my site https://www.stevenwhiting.com so custom to that, hence probably can't get a refund. I messed up when I did the CSR request and requested it for stevenwhiting.com instead of https://www.stevenwhiting.com and the company I brought it off say "because it was on promotion, they can't reissue it as the certificate company they brought it off have no ended the promotion, so to reissue it as www would incur another cost and the cost would be the full cost of the certificate and not the promotion price."

Annoying thing is, my hosting company that host the site have said they are talking rubbish, because they said if it was them, they'd just tell the certificate company about the mistake and they'd just reissue it for free because it's on the same site so not a security issue.

esuhl

Aren't the DSRs for tangible goods only? In any case don't think that it would be reasonable to claim that you need to examine the SSL certificates in your own home in order to ascertain whether they are what you were expecting...

I've just found this link relating to downloaded software: http://www.oft.gov.uk/business-advice/treating-customers-fairly/dshome/inpractice/?id=808355.

It seems that the DSRs would apply if the "durable information" (Ts&Cs?) about the service had not been provided prior to the download, but if that information had been given prior to the download, the customer wouldn't be able to ask for a refund...

Sorry - that probably doesn't help much!

Jai_M

Do you really need to run a blog via https???

leemoss

Jai_M wrote: »

Do you really need to run a blog via https???

I was thinking this too.

joeypesci

No, but as I'm into IT and it was on promo for £5, thought why not. And it's also good for the login because Wordpress logins are passed over the net in plain text, with HTTPS means it's encrypted. Yes I'm aware of SSLStrip but still.

But no offence, the question wasn't weather I need one or not, that's my business.

joeypesci

esuhl wrote: »

Aren't the DSRs for tangible goods only? In any case don't think that it would be reasonable to claim that you need to examine the SSL certificates in your own home in order to ascertain whether they are what you were expecting...

I've just found this link relating to downloaded software: http://www.oft.gov.uk/business-advice/treating-customers-fairly/dshome/inpractice/?id=808355.

It seems that the DSRs would apply if the "durable information" (Ts&Cs?) about the service had not been provided prior to the download, but if that information had been given prior to the download, the customer wouldn't be able to ask for a refund...

Sorry - that probably doesn't help much!

Thanks. Did help, confirms I can't get a refund

Well speaking to my hosting company and they are saying as the people who I brought the certificate off are being awkward they'll give me a free certificate for one year. Also have suggested I just sort out the site so it doesn't use www, which I'm now currently working on. May need to reinstall Wordpress though