SSL certificate

[Tai]

How do I get one of these for my site?

 

[Far]

https://www.globalsign.co.uk/ssl/

There are a lot of different companies where you can buy ssl certificates from - so maybe hunt around. my company uses verisign.

most domain providers (123-reg, godaddy etc) also offer SSL certificates.

 

[Tai]

123reg price is only £50 a year even though they use globalsign... is more expensive to go direct

bit confusing. are you good with this stuff then?

 

[Far]

nah sorry, i've never directly bought one myself, only know what they are really.

yeah the big gap in pricing confused me a little, i know there are many tiers of SSL verification, but not sure why globalsigns cheapest is £129 when 123reg is £50

remember getting your site on full ssl verification isn't always easy. all images, and plugins etc must run from a secure link too - so its not always a simple process of buying the certificate and thats it done.

 

[dsmir3]

If you can get away with not buy an SSL then don't, most host providers can give you this option for an extra couple of quid on top of your normal hosting account. Also it might be worth looking into creating your own.

http://www.sslshopper.com/article-how-to-create-a-self-signed-certificate.html
http://www.akadia.com/services/ssh_test_certificate.html
http://www.makeuseof.com/tag/free-ssl-certificate/

You might want to learn about SSL and what it does before purchasing, as an SSL is not always required.

http://security.stackexchange.com/questions/20803/how-does-ssl-work
http://www.sslshopper.com/article-do-i-need-an-ssl-certificate-for-my-website.html

 

[Hazuki]

Your using Cpanel from memory so guessing it will be shared hosting?

First thing get a dedicated IP added to your account then speak to your host what SSL options they give.

 

[Tai]

Ok thanks will do. Would this also solve my email issue? As currently any emails sent from my domain are black listed by Hotmail.

 

[Hazuki]

Again depends on your setup, have you got reverse DNS entries etc setup?

 

[dsmir3]

Are they blacklisted or just being sent to your spam folder, as this could be a Microsoft issue. But as Haz said, check with your host provider. Also it might be worth checking the black lists for your domain IP -

http://www.blacklistalert.org/
http://mxtoolbox.com/blacklists.aspx

I can't see it being on a blacklist though, otherwise other emails wouldn't work and other user of the same host would have an issue.

 

[Tai]

The ip isn't blacklisted but emails are sent to spam. I contacted my host and they were useless and said I needed to ask hotmail...?

 

[dsmir3]

The ip isn't blacklisted but emails are sent to spam. I contacted my host and they were useless and said I needed to ask hotmail...?

Just add your email address to your contacts and all should then go to your inbox, this sometimes happens with reverse DNS issues.

You can check this by using the MXTOOLS link.

 

[Tai]

Just add your email address to your contacts and all should then go to your inbox, this sometimes happens with reverse DNS issues.

You can check this by using the MXTOOLS link.

But it's not just for me I need any emails from my domain to go to inbox not junk because it will mainly be for customers.

I don't know what reverse dns is. The blacklist check came back all ok.

 

[Far]

how is your email laid out?

most email providers live by a strict point rule when receiving emails. if your emails don't mark high enough they get sent to the spam folder.

http://emailmarketing.comm100.com/email-marketing-ebook/flagged-as-spam.aspx

 

[dsmir3]

Who's your host, as this would be the point to be checking from.

 

[Tai]

Webhost-uk.net

terrible company

 

[dsmir3]

I've done a blacklist check for your host and they are clean.

SMTP CHECK:

SMTP Reverse Banner Check OK - 92.48.93.179 resolves to webhost.uk.net

SMTP Reverse DNS Mismatch Warning - Reverse DNS does not match SMTP Banner
SMTP TLS OK - Supports TLS.
SMTP Connection Time 0 seconds - Good on Connection time
SMTP Open Relay OK - Not an open relay.
SMTP Transaction Time 1.014 seconds - Good on Transaction Time
Session Transcript:
EHLO please-read-policy.mxtoolbox.com
250-daffodils.webhostpulse.com Hello mxtb-pws3.mxtoolbox.com [64.20.227.133]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP [109 ms]
MAIL FROM: <[email protected]>
250 OK [109 ms]
RCPT TO: <[email protected]>
550-Please turn on SMTP Authentication in your mail client, or login to the
550-IMAP/POP3 server before sending your message. mxtb-pws3.mxtoolbox.com
550-(please-read-policy.mxtoolbox.com) [64.20.227.133]:59740 is not permitted
550 to relay through this server without authentication. [312 ms]
QUIT
221 daffodils.webhostpulse.com closing connection [125 ms]


Reverse lookup is working fine

Your issue is with that I've highlighted, there SMTP record is wrong. So when email is sent out and authenticated against another mail server, it's reading the record and saying hang-on that's not where this email came from and is automatically marked as spam.

To fully prove that is what is happening, whats your domain.

 

[Tai]

Well that makes sense (despite the fact I don't understand this stuff) because when I open Outlook it throws up a message about the certificate not being trusted or whatever.

I will pm you the domain. Hopefully you can tell me how to go about resolving this.. thanks for the help so far

 

[dsmir3]

I know what your issue is and by the sounds of things it's your own fault, but I need to clarify this with you first.

Are you sending out multiple emails on a regular basis at all?

Basically sending out marketing emails.

 

[Tai]

No, I'm not sending any. I've sent a total of like 3 since I've owned the domain.

 

[dsmir3]

No, I'm not sending any. I've sent a total of like 3 since I've owned the domain.

You need to speak with your host, as I had a little conversation with them over certain things not working correctly and they advised that on average about 300+ emails are being sent out by that address.

So either they are aware of an issue and are trying to avoid addmitting it, or they are just bloody 100% useless.