Setting Up A Website Shop

pitkin2020

texranger wrote: »

well when i called my local business link office they told me that it is advised for all ecommerce site to have an ssl certificate.

Yes it is advised to have an SSL certificate but not compulsory if your not actually processing the payment which is how you came across to begin with. Big difference between advisable and compulsory, in most businesses its advisable to have public liability insurance but it isn't always compulsory.

I agree its probably good to have one as it does make your site look more secure but you DON'T have to have one if your not processing the payment through your site.

I find it hilarious that consumers really believe an SSL certificate offers them any real protection. Just read through this forum and look at the countless scam websites that have been reported, 99% of them had a valid SSL certificate!!

pitkin2020

texranger wrote: »

well i think its like alot of these organisation no one knows that the other one is doing.

when i initially enquired i was told it was a requirement, later when i caled i was advised that an ssl cert should be used as some comsumers will not purcvhase from a site without an ssl cert even if the site used a third party processor.

i myself do not just use paypal so i have all my ecommerce sites secured with an ssl cert.

Your contradicting yourself, one minute business link are giving you correct information then the next minute they are giving you conflicting information. Anyone on the end of the telephone can sound like they know what they are talking about but if something is compulsory it will be backed up in writing. Maybe next time ask them to refer you to where you can see it in black and white rather than taking what someone on the phone says as gospel!!

texranger

pitkin2020 wrote: »

Your contradicting yourself, one minute business link are giving you correct information then the next minute they are giving you conflicting information. Anyone on the end of the telephone can sound like they know what they are talking about but if something is compulsory it will be backed up in writing. Maybe next time ask them to refer you to where you can see it in black and white rather than taking what someone on the phone says as gospel!!

yes told 2 different things by 2 different people of the same organisation . but also taking what is written in basically a wordpress site by a simple host cannot also be taken as gospel

texranger

pitkin2020 wrote: »

I find it hilarious that consumers really believe an SSL certificate offers them any real protection. Just read through this forum and look at the countless scam websites that have been reported, 99% of them had a valid SSL certificate!!

you just need to watch programs like watchdog and even sometimes Martyn states it on daybreak that consumers should looks for the padlock or https when shopping on line, it is that easy to gain an ssl cert and install it on your site and still be able to take cc details without even using the ssl secuirty which a lot of scammer do.

patman99

Ebay don't have a SSL. Their site is most definetley an HTTP site not an HTTPS one. If it were the later, then my browser would show a padlock next to it.

The main reason for using a service such as Paypal is that it saves having to fill-out loads of forms to become PCI compliant. If you intend to run your own payment system, then there are loads of hoops to jump through.

As for 'you MUST use Magento, everybody is moving to it'. 3 major supplies that I use have just swapped-out to Ubercart. Mind you, having given Ubercart a spin in an evaluation exercise, I much prefer the ease of sites such as Avactis, OSCommerce and Magento. Setting-up catagories in ubercart is a right PITA.

OP, as you are starting-out, make sure you use the free version of the shopping cart at first. if you start turning a profit and want to use the extra features, then you can always buy a full license.

jimmyjones_2

patman99 wrote: »

Ebay don't have a SSL. Their site is most definetley an HTTP site not an HTTPS one. If it were the later, then my browser would show a padlock next to it.

Ebay do have 'a SSL', try logging in
Like most websites, when transmitting sensitive information such as credentials or personal information SSL is used.

steve1980

jimmyjones wrote: »

Ebay do have 'a SSL', try logging in
Like most websites, when transmitting sensitive information such as credentials or personal information SSL is used.

Yes, for people logging in, then of course you want SSL, but just because the OP has an ecommerce site she doesn't need one as she is not taking any information online through the website.

texranger

steve1980 wrote: »

Yes, for people logging in, then of course you want SSL, but just because the OP has an ecommerce site she doesn't need one as she is not taking any information online through the website.

an ecommerce site will take "credentials or personal information" in order to compete an order and most like ebay will store details in order for you to login in future.

has anyone heard of ID theft, they dont need any card details. just name, address, DOB (which some ecommerce sites will ask for) and they can create all sorts of havok in your name. these details are also encrypted via modern ssl cets now

pitkin2020

texranger wrote: »

an ecommerce site will take "credentials or personal information" in order to compete an order and most like ebay will store details in order for you to login in future.

has anyone heard of ID theft, they dont need any card details. just name, address, DOB (which some ecommerce sites will ask for) and they can create all sorts of havok in your name. these details are also encrypted via modern ssl cets now

Your ASSUMING details are being collected, not every site requires login and if your using paypal there really is no need as the customers address, telephone number and email address is available from the paypal side of things.

texranger

pitkin2020 wrote: »

Your ASSUMING details are being collected, not every site requires login and if your using paypal there really is no need as the customers address, telephone number and email address is available from the paypal side of things.

well unless the OP is just going to post the items to any address then they are going to need the name and address of the purchaser and the delivery address. also what i said was (which some ecommerce sites will ask for).
every site i have gone too even if they use paypal/sagepay or any other processor has always asked name, address, tel , email address and then delivery details if different