I am embarking on an upcoming Magento e-commerce project, target demographic is security-aware business customers. The extended validation (green bar) SSL is -- in my view -- required for the website.
There was an Ask HN thread [1] from nearly three years ago that asked the same question, and a variety of answers were provided. On the one hand, there's the "don't spend more than x" on a certificate, and there's the flip side of "get a green bar, it's worth it".
The specifics:
- site is running atop Magento 1.9 on LAMP, payments processed offsite by Braintree (i.e., no credit card details stored on the website)
- initially 1x IP address, hosted from a UK data centre
- static components may be served from a non-www subdomain (i.e., static.example.com) in future, which may be the same or different IP address
My questions:
1. Who's worth shortlisting in 2014?
2. If you consider yourself a security-aware shopper, would you be dissuaded from purchasing from a site with standard (`non-green`, if you will) SSL?
Thank you in advance.
[1] https://news.ycombinator.com/item?id=3556796
So if you do go for an EV cert, go for the one that has the best listed uptime on it's CRL or OCSP servers.
Having said that, I would never spend more than $10 on a cert, and just use the most standard/common "bundled" CA cert. No one will ever know. It will have faster page loads. And those fake stories that EV certs increase conversions are exactly that, fake, and misleading. No one will real world experience has ever claimed to see a positive difference with EV certs.
The only problem with cheaper certs is you have to bundle the intermediary CA certs...
http://www.devside.net/wamp-server/installing-comodo-positiv...