Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Possible Duplicate:
What are the advantages of EV Certificate?

besides the green URL bar and free security scan and whatnot.

Our website does NOT accept any personal info other than email address and passwords. So no banking compliance needed.

But our company business revolves around subscribers logging on for information they paid for.., (xls docs, etc).

Does anyone know of any other compliance reasons why anyone really needs a Premium SSL cert instead of the basic SSL package? both are '40-bit minimum to 256-bit SSL encryption'.

share|improve this question

marked as duplicate by Scott Pack, makerofthings7, AJ Henderson, Lucas Kauffman, Gilles Feb 1 '13 at 12:49

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

2 Answers 2

up vote 6 down vote accepted

From a security perspective, you don't get any additional capabilities from the Premium vs the Standard as long as the key lengths are the same. The difference is simply the level of validation that the CA performs and thus gives the end user more confidence in your site being legit.

share|improve this answer
    
True. Essentially, the CA super-double-triple checks that you are the company you claim to be, and that you own the domain you claim to own. They already do this for standard certs, but they /really/ do it for premium/EV certs. –  Steel City Hacker Jan 31 '13 at 14:03

You want the premium SSL certificate exactly because of the green bar. This is all about making the putative customer feel safe and comfy. Remember that, by definition, your certificate is not for you; this is an object which you need to convince other people that you are who you claim to be.

share|improve this answer
    
We don't care much about the 'green bar'. It really has no use and our website login access is not publicly accessible. –  Tom Geee Jan 30 '13 at 22:39
    
It's just about the PR. Really. We went through it for our website and some of the other developers had to be convinced it was just about looking "more" secure. –  staticsan Jan 31 '13 at 2:02

Not the answer you're looking for? Browse other questions tagged or ask your own question.