Does My Web Site Need An SSL Certificate?

Does your web site need to be secure?  Do you really need to spend the money and time purchasing and setting up SSL for your site?

This is actually a very simple question to answer if you don't want to think about it too hard.  The best way to determine whether or not your web site should have SSL encryption is to ask yourself this simple question:

Does anyone, including me, log in to my web site with a username and password?

If the answer to this question is Yes, then you probably should purchase an SSL cert for your web site to protect against one of your users, or worse, your admin credentials being exposed to a third party.

If the answer is No, you really don't need SSL.  If nobody is logging in, then there is no credential to secure.  All you are encrypting is the same thing you are presenting to users who visit your site, and there is really no point from the Web Server perspective in encrypting this traffic.  SSL Encryption makes blocking your web site with web filtering software more difficult, but other than that there isn't much benefit to having an SSL cert if there is no sensitive information to protect.

Part of a Series: