Communication between the GoPay payment gateway and the paying customer is always secured using SSL.
What is SSL/TLS
SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are cryptographic protocols that allow data to be transferred securely over the public internet. On the web, these protocols have two basic roles:
Encrypting communication and verifying the integrity of data transferred between the client and the server.
Verifying that the browser is communicating with the correct server. In practice this means verifying that the domain owner is the same as the owner of that server.
GoPay currently uses TLS to encrypt communication. You can read more about SSL/TLS and secure communication for example on Wikipedia.
What is HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is a combination of the HTTP protocol and SSL/TLS used to transfer data securely between a browser and a server.
What is a certificate
A certificate is a digitally signed encryption key issued by a certification authority. Certificates are used to identify the other party when establishing a secure connection. They also allow website users to verify that they really are communicating with the server they intend to, and not with a fraudster.
HTTPS and the Inline payment gateway
All communication and data transferred when using the Inline payment gateway is secured and encrypted between the paying customer's browser and the GoPay payment system, just as it is with the Redirect payment gateway. Communication is encrypted using 128-bit TLS.
Securing communication when using the Inline payment gateway
Since most people today associate online safety with the padlock in the browser's address bar, every merchant who wants to offer customers the convenience of the Inline payment gateway (without redirection) must have HTTPS implemented on their website. Customers will then feel safer and will be less likely to abandon payments.
How do I set up HTTPS/SSL
First you need to obtain a certificate. Certificate prices range from roughly CZK 300 to CZK 15,000, depending on the type of certificate and the particular recognised certification authority (CA). From our own experience we can recommend certificates from GeoTrust.
After that, all that remains is to configure your application server. Most CAs describe clearly how to install the certificate. You can find such instructions for example on the GeoTrust website.
If you have any questions, do not hesitate to contact us. We are ready to help.