Checkout Page

Hi Guys,

Setting up my first store I see the checkout page allows credit card details to be entered before getting directed to PayPal. Should this page be protected by SSL?

Thanks Jon

Hi

not sure whats happened but I do not see this on PS3 . The whole concept behind using paypal, authorise etc is that they handle all the security aspects relating to payments.

In fact paypal advertising clearly states that users never have to input card details.

I suspect that technical will have to sort this. One thing you can check is that in the admin section you do have paypal express ticked.

cheers

Ian

Yes, the checkout pages should be hosted using an SSL certificate to maintain security.


I personally prefer to host the entire store behind the SSL certificate and redirect all http traffic to https so the entire shopping experience is on the secure server.

Thanks Jason. I will buy a cert and I guess an IP address as the site is on a shared hosting plan.

One question, would you use a .htaccess file to redirect all http requests to https.

Many thanks Jason


Jon

yes, see the following:
howto-apache-force-https-secure-connections.html