When you need SSL and when you don't

Most web hosts offer some form of SSL in at least some of their hosting packages. Many users are confused about when it is necessary to have SSL, when it is optional, and when they do not need it at all. SSL stands for Secure Sockets Layer. It is essentially a form of security encryption that protects data being transferred from one point to another. In terms of web sites, SSL is used to display encrypted website pages via the HTTPS protocol.

Many users who run businesses automatically believe that SSL is necessary. The truth is that it is only absolutely necessary if you are collecting sensitive data from your visitors, whether it is credit card numbers, addresses or any other information that visitors would consider private. If you forward your customers to a payment processor without collecting any sensitive information on-site, SSL is probably optional for you. It might make your operation look more professional to have a verified security certificate, but it is not necessary.

Good web hosts offer more than one SSL option. For a full SSL implementation, your website will require its own IP address, and you will have to purchase an SSL certificate from an established SSL authority. If your needs are not that great or you cannot afford that option, some hosts offer Shared SSL, which provides SSL to shared hosting customers (i.e. multiple customers sharing a single IP address). This method will usually suffice for small operations. If none of the above apply to your website, then you most likely do not need SSL at all.