Facebook App - secure canvas - SSL

Question

I'm building facebook App, but as I understood I need SSL.

Is there any way to avoid buying SSL?

Answer 1

You can avoid using an SSL certificate under these conditions:

• The app is in sandbox mode, visible only to a specified group of people
• You don’t care about users using a secure connection on Facebook — you can specify https://example.com

You can avoid buying such certificate if your hosting provider has one for you (for example: heroku - ssl setup).

You can try to search for free certificates. As far as I know, http://startssl.com provides such a service.

You can use self-signed certificates. Your users will be prompted to accept validity of the certificate (or forced to add exception, which is a cumbersome process).