This is a subject we get a lot of emails asking questions about – so we through we’d throw a blog post explaining what SSL is, why it’s required with Facebook applications now, and how you can get it if you don’t have it.
What is SSL?
SSL, which stands for Secure Sockets Layer, is the standard security technology for establishing an encrypted connection between a web server and a browser. This connection ensures that all data passed between the web server and browser remains private and encrypted. You generally can spot a SSL connection based on the https:// (instead of http://) prefix in the website address. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers, and as you have guess, is now being strongly pushed by Facebook.
Why is Facebook requiring SSL?
Starting October 1st, 2011, Facebook started requiring all Facebook developers to specify HTTPS URLs to all canvas and fan page applications. Security is becoming a huge issue in today’s world – Facebook has recently started pushing complete secured browsing in all of Facebook – since your data is presented in the Facebook canvas, we assume they want to minimize browser SSL errors by making all iFramed pages support SSL aswell.
How can I get SSL?
Most web hosts, such as HostGator, support SSL on at least one plan. If your host doesn’t already provide you with a private SSL certificate, you can do a Google search and find them generally for under $20/year. Once you purchase this, forward your certificate information to your host’s support department, and they will install it for you.