SSL Certification – Clarification Needed!! (9 posts)

  • Hi Everyone!

    I think there is still a lot of confusion out there about the new Facebook SSL certification requirements. I had a conversation recently with a web design company who told me that you need an SSL certificate if you are going to use a Custom Landing tab with a fan-gating facility but this is not the case as I installed the Wildfire app for a client yesterday and it works fine without the need for a security certificate.

    So my question is this!! As I understand it, the SSL certification requirement is needed when an app requires any transfer in data, so the web company referred to above could have a point if the custom landing tab also had an email sign-up box (as per the social media examiner Page), but not a run-of-the-mill landing tab. Is this correct?

    I suspect the web company were trying to cash-in on the confusion that exists at the moment about what does and does not require this certification, to persuade clients to part with money unnecessarily.

    I would also be interested to know if anyone has a simple explanation of what does and does not need the SSL certification, to help me explain the requirement to clients.

    Alan

  • I think all data showed within a Facebook page has to stored on a server with SSL. Let’s say you have a video stored on your own server and you are linking to it on a tab. Then you have to make sure the video is stored with SSL, otherwise I suspect you can’t see it.

    Places like Youtube are SSL so storing a video at Youtube and using that to show on your tab works fine.

    The different tab companies are probably not alike but many are probably storing all the data you need for your tab on their servers. And by now they are SSL or they would be out of business :-)

    All data on every tab, if it is made through the third app companies or something you made yourself, has to be stored using SSL.

    If you are creating a tab page through Wildfire or somebody else  and add the code for an opt in email list, the opt in is just code, stored with the entire page that is probably stored with Wildfire.

    If the opt in code is on a page you made yourself and store on your own server, then you need SSL storage.

    So it is not just when the code does something to transfer data. The data itself that is shown on the page, backgrounds, html, photos, videos etc, all of it has to be stored with SSL.

    And that is why it is so easy to use third party apps, you don’t have to worry about it, they do it for you :-)

  • Great answer  @susannstjernborg!  Yes, the third party apps where you upload a picture onto their server work perfectly and you don’t need an SSL.  But if you are using the HTML portion of the third party app and you reference a photo or anything on your OWN site within that HTML, then you need an SSL certificate.  They usually are only around $50 I believe.  

  • @susannstjernborg Good explanation Susan, thanks very much! Thanks also @andrea-vahl for your comments on the subject. Sounds like in most cases using a third-party app will be fine for most businesses. 
    Alan 

  • A strange thing happened to me today! I was checking up on the Facebook page, I mentioned at the start of this topic and the Welcome tab is now giving me the ‘Do I trust this site’ message, which to me suggests the need for the SSL certificate.

    As I mentioned, I set this up using the Wildfire i-frame app yesterday and it all seemed to work perfectly and there was no message displayed but now I am getting asked the trust question.

    Has anyone come across this issue before?

  • Interesting @chatmarketing – I have the Wildfire Welcome Page app on one of my welcome pages and am not having an issue.  Did you just use the image upload?

  • Hi Andrea, yes it was an image I uploaded rather than the HTML coding. I have since asked someone outside of the business to test the FB page again off-site, and it looks fine. It might be something to do with my client’s security settings! I am not sure exactly what is going on but at least I know that when visitors come to the page they are seeing the welcome tab properly. Thanks again for your input.

  • I have a simple (and free) solution to hosting your own images. 

    I use an iframe/html app for all of my welcome pages, but I still needed to host the images for the clients.  Instead of purchasing my own SSL certificate, I simply created an account for them in Windows SkyDrive and have the images stored there.

    Skydrive provides a https:// url for each photo, so when I am pulling the photo into the html code, I don’t have to worry about it.

    I transferred all of the images for the 20+ pages I admin, and it worked for every single one.  Simple and free!

  • Hi Lisa, thanks very much for the tip! I have not heard of Skydrive, but sounds like a good solution although I prefer to stay away from HTML coding.Alan


Add your voice to the discussion

Existing members: . If you do not have a SME account, .