Does purchasing an EV or OV SSL certificate make your website any more secure than a site with the free cPanel DV SSL certificate?
What reason would you purchase an EV or OV?
What reason would you purchase an EV or OV?
The all provide the same encryption. The only real difference (now days) is that some of the paid SSL's provide "seals" that you can put on your web site and they may add from the "marketing" point of view.
Greetings!
As with most things in the hosting world, the benefits depend entirely on the goals one has for their tools.
In terms of encryption, there is no difference between the different certificate levels. As their name implies, the difference is in how in-depth the validation process is prior to its being issued. Depending on your business needs, that additional level of validation may be important for the trust of the site's users.
Additionally, certain industries may have specific certification requirements, which include that additional validation. Financial services sites being one of the first to come to mind.
Encryption is obviously important, from a security perspective. However, there's certainly an argument to be made about the impact on a site's purpose, resulting from a user's confidence(or lack thereof) in a site's authenticity. As technical-minded folks, we sometimes tend to disregard the ultimate goal of SSL certificates: user trust.
As with most things in the hosting world, the benefits depend entirely on the goals one has for their tools.
In terms of encryption, there is no difference between the different certificate levels. As their name implies, the difference is in how in-depth the validation process is prior to its being issued. Depending on your business needs, that additional level of validation may be important for the trust of the site's users.
Additionally, certain industries may have specific certification requirements, which include that additional validation. Financial services sites being one of the first to come to mind.
Encryption is obviously important, from a security perspective. However, there's certainly an argument to be made about the impact on a site's purpose, resulting from a user's confidence(or lack thereof) in a site's authenticity. As technical-minded folks, we sometimes tend to disregard the ultimate goal of SSL certificates: user trust.
Not to sidetrack the thread, but I'll respectfully disagree with @cPDavidL a bit. For a long time we have a EV cert on our site/billing portal to give customers the "extra confidence" of the green address bar. With the not so recent changes with all major browsers defaulting to secure (and only displaying a warning when they are not secure) it's virtually impossible for an average customer to distinguish between a DV, EV or any other certificate. It's still possible to tell (if you are technical) but the "value" of an EV cert seems to be greatly diminished.
| Thread starter | Similar threads | Forum | Replies | Date |
|---|---|---|---|---|
| C | checkallsslcerts and change hostname | Security | 3 | |
| J | AutoSSL order is still pending even though other domains after it got the Certs. | Security | 2 | |
| D | AutoSSL not replacing all certs on domain | Security | 8 | |
| P | Gettin errors from checkallsslcerts script | Security | 8 | |
| R | cpanel ssl certs versus CA authority certs | Security | 5 |