HTTPS protocol at the merchant’s side
The connection between the GoPay payment gateway and a customer who pays with GoPay is always secured with SSL.
What is SSL/TLS
SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are encrypted protocols enabling a secure data transport on the internet. As for the web the protocols ensure the following:
- They encrypt the connection and verify an integrity of data passed between a client and server.
- They check if the browser is connected to the right server. That means that they check if the domain owner is the same person as the server owner.
GoPay uses a TLS to encrypt the communication. You can read more about the SSL/TLS encryption on Wikipedia.
What is HTTPS
HTTPS (Hypertext Transfer Protocol Secure) is a combination of the HTTP protocol and a SSL/TLS for a secure data transfer between the browser and server.
What is certificate
Certificate is a public key used to prove the identitiy of the public key owner. It has a digital signature of the entity/issuer that has verified it. Certificates are designed to create a secure connection. They also enable the web users to check their connection so that they know they communicate with the server and not with a hacker.
HTTPS and inline payment gateway
Inline and Redirect version of the payment gateway use the same secure and encrypted connection between the browser of your customers and the GoPay payment system. It’s a 128-bit TLS.
Many people tend to check a secure connection by looking at the green stripe in the address bar of the browser. All the merchants who want to offer a comfortable Inline payment gateway (without redirecting) must implement the HTTPS. Your customers feel more safe which can avoid a checkout abandonment.
How can I add HTTPS/SSL
First you must get the certificate. The price for certificates range from 149 to 745 US dollars. It depends on the type of the certificate and also on the particular certificate entity (CA). We recommend you using GeoTrust certificates.
After that you need to set your application server. Most of CAs provide guides how to install the certificate. You can find one on the GeoTrust website.
If you need to ask us about something feel free to contact us. We are more than willing to help you.