I am embarking on an upcoming Magento e-commerce project, target demographic is security-aware business customers. The extended validation (green bar) SSL is -- in my view -- required for the website.
There was an Ask HN thread [1] from nearly three years ago that asked the same question, and a variety of answers were provided. On the one hand, there's the "don't spend more than x" on a certificate, and there's the flip side of "get a green bar, it's worth it".
The specifics:
- site is running atop Magento 1.9 on LAMP, payments processed offsite by Braintree (i.e., no credit card details stored on the website)
- initially 1x IP address, hosted from a UK data centre
- static components may be served from a non-www subdomain (i.e., static.example.com) in future, which may be the same or different IP address
My questions:
1. Who's worth shortlisting in 2014?
2. If you consider yourself a security-aware shopper, would you be dissuaded from purchasing from a site with standard (`non-green`, if you will) SSL?
Thank you in advance.
[1] https://news.ycombinator.com/item?id=3556796
There was an Ask HN thread [1] from nearly three years ago that asked the same question, and a variety of answers were provided. On the one hand, there's the "don't spend more than x" on a certificate, and there's the flip side of "get a green bar, it's worth it".
The specifics:
- site is running atop Magento 1.9 on LAMP, payments processed offsite by Braintree (i.e., no credit card details stored on the website) - initially 1x IP address, hosted from a UK data centre - static components may be served from a non-www subdomain (i.e., static.example.com) in future, which may be the same or different IP address
My questions:
1. Who's worth shortlisting in 2014? 2. If you consider yourself a security-aware shopper, would you be dissuaded from purchasing from a site with standard (`non-green`, if you will) SSL?
Thank you in advance.
[1] https://news.ycombinator.com/item?id=3556796