Question about SSL to deal with Facebook https changes

by MarieM
7 replies
Please excuse me if this is a noob question, but my partner and I just started up our offline business last month, and are still learning.

Reading about the Facebook announcement that they will soon be requiring all app developers to use SSL, I'm wondering how this affects us and our custom Facebook Fan Page customers?

I'm not that knowledgeable about the hosting side of websites, so it's not clear to me how we implement it or what we're looking at in increased costs.

And does it mean we have to go back to our previous Fan Page customers and redo their pages to keep them working?

Can anyone advise, or point me to resources that are a bit more plain-english than the tech media releases?

Thanks,
Marie
#deal #facebook #https #question #ssl
  • Profile picture of the author neverlastn
    Hello Marie,

    If you are using facebook tabs or apps you will have to highly likely go and change a link in the admin panel to make them keep working as usually.

    if you are in one of the shared hosting companies that provide Shared SSL certificate, you won't need to pay anything but you will need to find the correct url. Search on google for "secure-facebook-ssl-hosting" to learn more.

    Cheers
    {{ DiscussionBoard.errors[4355098].message }}
  • Profile picture of the author thehypnoguy
    If you are seriously going to be in the Facebook Fan Page business then pay the $50 a year and buy your domain its own SSL Certificate and pay the extra $2 a month for the dedicated IP.

    If you are doing custom Fan Page Tabs then host their Tab content on your server and you won't have to worry about the changes as you will have already handled them.

    Just know that any content that is from a non secure location when they are using https for their connection will generate a message for them to decide to display all content or only secure. If they choose only secure then your unsecure content won't display (i.e. your youtube video).

    Handle Youtube video in your https content file by placing an image as a link on the page that opens a javascript window and displays the video in the window. Then you will have no error message and you can supply all their content seamlessly.

    Martin Blakley
    {{ DiscussionBoard.errors[4356969].message }}
    • Profile picture of the author neverlastn
      [DELETED]
      {{ DiscussionBoard.errors[4369131].message }}
      • Profile picture of the author thehypnoguy
        Originally Posted by neverlastn View Post

        Hello Martin,

        so what you are saying is that from the 1st of Octber, Facebook is not going to require SSL for every tab and app, right? If visitors click they are ok to see non-secure page, they will still be able to see it, right?

        Cheers.

        P.S. In any case find how to get over the problem and get free SSL with many major hosting providers in scalingexcellence.co.uk/secure-facebook-ssl-hosting
        Actually you have that quite backwards. Starting October 1st all the coddling and baby cooing is over and Facebook slams the hammer down. If you don't have it all in order on that day things will go awry.

        The truth about the free SSL certificate

        They all look like this:

        https://barfart.websitehello.com/~yo...ress/index.php

        What is wrong with that. If you try to display your wordpress blog in one of those iframe tab it is going to go south on you. Wordpress doesn't use relative url's it uses absolute url's so it won't function on the end of that secure url.

        Like I said pay the $50 and quit trying to go cheap on everything. Are you really in the business of offline or is this a game. The real players step up and do what is necessary.

        Martin
        {{ DiscussionBoard.errors[4369402].message }}
        • Profile picture of the author Jill Carpenter
          Originally Posted by neverlastn View Post

          Hello Martin,

          so what you are saying is that from the 1st of Octber, Facebook is not going to require SSL for every tab and app, right? If visitors click they are ok to see non-secure page, they will still be able to see it, right?
          No - they will not be able to see it.


          Originally Posted by thehypnoguy View Post


          Handle Youtube video in your https content file by placing an image as a link on the page that opens a javascript window and displays the video in the window. Then you will have no error message and you can supply all their content seamlessly.

          Martin Blakley
          Actually, youtube provides an https embed code to use on your ssl secure pages to reduce browser conflict issues.

          Originally Posted by thehypnoguy View Post

          Actually you have that quite backwards. Starting October 1st all the coddling and baby cooing is over and Facebook slams the hammer down. If you don't have it all in order on that day things will go awry.

          The truth about the free SSL certificate

          They all look like this:

          https://barfart.websitehello.com/~yo...ress/index.php

          What is wrong with that. If you try to display your wordpress blog in one of those iframe tab it is going to go south on you. Wordpress doesn't use relative url's it uses absolute url's so it won't function on the end of that secure url.
          Of course, there is a solution to this as well which has worked perfectly for me in displaying the https on facebook with my wordpress driven site.
          Signature

          "May I have ten thousand marbles, please?"

          {{ DiscussionBoard.errors[4380808].message }}
          • Profile picture of the author thehypnoguy
            Originally Posted by Jill Carpenter View Post

            Actually, youtube provides an https embed code to use on your ssl secure pages to reduce browser conflict issues.
            Actually Youtubes https secure link is hit and miss. Sometimes it works and then other times it just refuses to stream the video. Not to mention secure is slower and uses alot more resources which is probably why Youtube has a tendency to block secure calls to video.

            Martin Blakley
            {{ DiscussionBoard.errors[4422722].message }}
            • Profile picture of the author neverlastn
              Originally Posted by thehypnoguy View Post

              Actually Youtubes https secure link is hit and miss. Sometimes it works and then other times it just refuses to stream the video. Not to mention secure is slower and uses alot more resources which is probably why Youtube has a tendency to block secure calls to video
              That's true. I attach an image for those who are wondering where/how to find the https link on youtube in order to embed in e.g. their facebook page tab.

              What is really important to realize is that IT'S THE END of the http ERA. In the next 2-3 years EVERY SINGLE website out there will turn https. I won't be surprised if in the future Google penaltizes non-https websites that host anything e-commerce related.

              SSL uses slightly higher bandwidth (not that important) but certainly 20% more processing power (i.e. not very eco-friendly) and this *might* translate to higher hosting costs. Probably all those problems will be resolved quite soon for good with hardware extensions on servers.

              It's really improtant to understand that http is over and just get ready for it

              P.S. You might be able to get SSL hosting for FREE because you already have a certificate - check my article here.
              P.S.2 Even in case you need an SSL certificate - don't pay more than $8/yr please! Do some research - otherwise it's like paying $1000 for a professional mousepad (!!)
              {{ DiscussionBoard.errors[4441098].message }}
              • Profile picture of the author kingcup
                Thanks for that info - i'm off looking into it now.
                {{ DiscussionBoard.errors[4454891].message }}

Trending Topics