Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Can I use a free self signed SSL certificate for a secure Canvas URL?

Tags:

facebook

ssl

Facebook require SSL certs for a secure Canvas URL.

I notice some organizations offer free, self-signed SSL certificates. You can aslso find them by using your search engine of choice.

Will these types of certificates be acceptable?

like image 876
giorgio79 Avatar asked Sep 06 '11 11:09

giorgio79


People also ask

Do free SSL certificates work?

Free SSL certificates can definitely do the job in cases where trust is important but not critical, for example, on blogs and other small information sites.

Are self-signed SSL certificates secure?

Self-signed certificates are safe in a testing environment, and you can use them while you are waiting for your certificates officially signed by CAs. But, using them in a production environment leaves the systems exposed to vulnerabilities and security breaches.

What is a disadvantage of a self-signed SSL certificate?

Self-signed SSL Certificates are risky because they have no validation from a third-party authority, which is usually a Trusted SSL Certificate Company. Developers and businesses try to save money by using or creating a free Self-Signed SSL Certificate.

Is self-signed certificate free?

Unlike CA issued certificates, self-signed certificates are free of charge. What most users are not aware of is that self-signed certificates can end up costing them more in the long run.


1 Answers

You may be able to use a Self Signed certificate but it will throw up browser warnings because your certificate isn't included in the ones that are trusted. To get a proper certificate you need to pay and get one through a Certificate Authority

According to this forum post on the FB Developer Forums you should be able to:

Facebook has not set up any requirements for the SSL certificate, but in the interest of your users not being showed an invalid signature dialog (It's looking pretty dangerous in firefox, while it's not dangerous at all having a self-signed cert) you should get a certificate for somewhere around 10$/Yr.

However the wording on the Developer Roadmap suggests that you actually need to obtain a certificate. You could get the minimum required certificate for about $10/year and could save quite a few headaches

like image 141
Suhail Patel Avatar answered Sep 27 '22 16:09

Suhail Patel