|
larry bread
|
April 5, 2013 at 8:19 am
hI – I have just moved my client’s site to live, it’s password protected while I work this out.
Have run a transaction through Stripe (using Live keys) for $1 and it was processed ok as far as I can tell – all emails sent and the $1 shows in the Stripe account.
What I’m concerned about is that the docs all mention Stripe requiring an SSL certificate on the server. The clients site is on a brand new Bluehost account, and I’ve checked there are no SSL certs present – and yet the transaction went through fine.
Am I misunderstanding something here? Should I get an SSL cert for the domain anyway eg either through Bluehost or startSSL.com?
Thanks
|
|
Josh
|
April 5, 2013 at 8:35 am
Hi Larry,
Yes, whenever you use an on-site payment option like Stripe there should be an SSL cert installed for the domain, and the pages that handle the payments should be set to load as https. We’ve prepared a guide here that outlines how to do this:
https://eventespresso.com/wiki/espresso-sslhttps/
I’ve seen it where the transaction will still go through when using some of the on-site gateways without using https. I know some will not work at all without it (like PayPal Pro). It may be that the Stripe gateway doesn’t check for https so it would still work, just not securely. Typically any of the gateways will work without SSL if they are in test mode too.
|
