SSL, or Secure Sockets Layer, is a data security tool that was designed to keep communication over the internet safe. Data sent via an SSL connection is protected by a mechanism called encryption that scrambles the data in transit to prevent theft and tampering. All SSL provide same encryption, however mechanisms of obtaining a certificate varies by type a.k.a validation type.
Ultimate Guide to SSL Certificates with infographics here
Difference between types
- Domain validation SSL (DV)
DV SSL are considered to be of low assurance and are the easiest to get—all you need to confirm is that you own the domain you apply for the SSL with. This validation method is secure enough, however if someone obtains control over a domain they don’t own, (i.e. email access, ftp access or DNS access), SSL could be issued to a wrong person. Great for personal user, facebook app or login page.
- Extended validation SSL (EV)
EV SSL are the most hacker-proof certs in the industry thus are considered as the most trusted. For you to obtain EV, company’s legal existence, operation history and physical existence must be confirmed. All these verified details are displayed in the certificate details in the address bar in browsers to indicate your business name and existence legitimacy. These kinds of certs are impossible to fake, that’s why they get “very high assurance” grade.
- Organization validation SSL (OV)
OV SSL also require organization legal existence confirmation, however organization validation process requires less steps, i.e. it doesn’t matter how long a company operates, certificate authority doesn’t verify the person who applies for OV on behalf of a company, neither legal address is verified via public sources. The details of a verified company are shown in the certificate details.
What to choose?
OV and EV are recommended for business, DV — for individuals. EV and OV SSL certificates are especially recommended for ecommerce sites as building confidence among customers and forming a trustworthy reputation around the site and brand is essential for such type of business.
Go all-HTTPS
Did you know that google rewards all-HTTPS sites increasing their search engine ranking?In August 2014, Google announced that the ranking position of a website can be increased by using an SSL certificate. Not to mention encrypted connection protects privacy on the internet.