Jump to content

SSL EV certificates in Community in the Cloud


eGullet

Recommended Posts

I know that Invision currently supports basic SSL certificates in their Community in the Cloud offerings. Considering that we are now asking people to input their credit card information directly in our sites (at least for some payment methods) it would be REALLY nice to offer Extended Validation certificates so that our donors/purchasers can be confident that their connection is both encrypted and authenticated. I teach computer security classes and my advice to students is to never enter financial information unless they see the green bar.

Link to comment
Share on other sites

On 11/8/2015, 10:48:22, eGullet said:

I know that Invision currently supports basic SSL certificates in their Community in the Cloud offerings. Considering that we are now asking people to input their credit card information directly in our sites (at least for some payment methods) it would be REALLY nice to offer Extended Validation certificates so that our donors/purchasers can be confident that their connection is both encrypted and authenticated. I teach computer security classes and my advice to students is to never enter financial information unless they see the green bar.

sometimes as well the green bar not being displayed can be due to displaying unsecure images. 

Link to comment
Share on other sites

8 minutes ago, MADMAN32395 said:

sometimes as well the green bar not being displayed can be due to displaying unsecure images. 

Oh, but that's not problem.  It's just insecure content being served over a secure connection.

and yes, I'm being sarcastic.  For a long time that was what I was hearing (that it wasn't that important that the green lock show) until IPS finally got the ability to display both in a secure manner.

Link to comment
Share on other sites

  • Management

We can do EV certificates. As you likely know, the process is much more stringent and involved for EV certs and they're only available to properly registered organizations - so it's not something we promote by default. You are definitely welcome to contact us via a customer service request to discuss for your situation and we'll be happy to help you green bar. :)

Link to comment
Share on other sites

  • Management
34 minutes ago, MADMAN32395 said:

I personally use a Comodo RSA Domain Validation cert. Validate your domain and youre good (greenbar and such). IIRC still has the same amt of insurance as well.

The padlock is not the same as the green bar (i.e.: https://www.invisionpower.com ) and the only way to get the green bar is with an EV certificate. DV is just basic domain validation - they send an e-mail to the WHOIS contact, the contact approves it and you've established you own the domain but nothing else. EV certificates require paperwork proving you're a legitimate, registered and valid organizational entity, have a presence and can be verified by D&B or via written certification from a professional such as your attorney or accountant. 

 

Link to comment
Share on other sites

10 hours ago, Lindy said:

The padlock is not the same as the green bar (i.e.: https://www.invisionpower.com ) and the only way to get the green bar is with an EV certificate. DV is just basic domain validation - they send an e-mail to the WHOIS contact, the contact approves it and you've established you own the domain but nothing else. EV certificates require paperwork proving you're a legitimate, registered and valid organizational entity, have a presence and can be verified by D&B or via written certification from a professional such as your attorney or accountant. 

 

oh yea, i see the difference now. haha. 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...