Heads up, page admins! As of October 1st, Facebook announced that any iFrame page tabs not hosted on a secure server under HTTPS will not be displayed to users browsing under HTTPS. This article will tell you what you need to do.
According to Facebook’s Cat Lee, ”The content will not be accessible for users with secure browsing turned on. There will be a page that states something close to: This app does not support secure browsing.”
To help page admins locate a budget-friendly and secure hosting solution for their page tabs, I did some digging and located some great hosting companies offering low-cost secure hosting solutions.
There are certainly others, and I have provided some guidelines for making the right hosting choice. I have also laid out some of the basics of hosting and security certificates.
Facebook and Secure Browsing (HTTPS)
In February, Facebook introduced the “Secure Browsing (HTTPS)” option. Since then, when browsing under HTTPS, any page tab content not hosted securely displays a popup with a warning that the page is not secure. Users have to click on the popup before viewing the tab content.
Page tab creators had the option of providing a “Secure Page URL” to display to HTTPS users. As of October 1, a secure URL is mandatory, and page tabs not hosted securely will no longer be displayed to users browsing under HTTPS.
What Is Secure Browsing (HTTPS) and How Do I Get It?
When a web page is hosted on a server enabled with the SSL (Secure Socket Layer) protocol via a security certificate, content sent between a user’s browser and the server hosting the secure web page is encrypted, and no one can intercept confidential information such as credit card numbers, Social Security numbers or any other information you type into your browser.
All web hosting companies offer security certificates in most of their hosting plans, either a shared SLL certificate, where all sites on a single shared server are sharing a certificate, or a private SSL certificate, available to websites with a unique IP (web address). For Facebook page admins, the shared SSL is a low-cost and workable choice.
Shared SSL Versus Private SSL
If all you need is an affordable option for hosting your page tab’s “index” page (the iFramed page you host yourself), you can consider plans that offer shared SSL on a shared server, which is the cheapest option. Although not a good choice for an e-commerce site, shared SSL is fine for meeting Facebook’s requirement for a securely hosted page. Beware file size restrictions on shared SSL!
In researching this article, I did notice that BlueHost and HostMonster (both owned by the same parent entity) put a file size restriction of 100KB for each embedded file on your page (images, audio, video, etc.) which would be far too restrictive for most iFrame page tabs. But I didn’t see this shared SSL restriction anywhere else.
Some Popular Web Hosts That Offer Low-cost Secure Hosting
The following hosting companies all offer low-cost hosting, and most include a shared SSL option. I did some informal polling on the HyperArts fan page and the following companies stood out.
Note: “Bandwidth” is the total amount of data transferred from the server each month and this number increases as your website is accessed more often; “disk space” is the total amount of storage space that is provided for the files associated with your site, including log files and MySQL databases (but not email).
DreamHost has been around for years and is generally well-regarded. However, DreamHost doesn’t offer shared SSL, and their phone support, which costs extra, is minimal.
Minimum for secure hosting: $14.15/mo. (hosting: $8.95/mo. + private SSL: $1.25/mo. + unique IP: $3.95/mo.)
Bandwidth and disk space: unlimited
Support: 24/7/365 email support (response within 24 hours), premium support (3 phone callbacks/mo. + unlimited live chat) add $9.95/mo.
Hosting Plan Comparison
BlueHost offers a full array of budget hosting options. Although they offer shared SSL, there is a file size limit on each page of 100KB per included file, and BlueHost warns that “any embedded data (images, audio clips, etc.) larger than 100KB will be truncated.” So this limitation may not work for you.
Minimum for secure hosting: $5.95/mo. (with shared SSL)
Minimum for private SSL: $12.20/mo. (hosting: $5.95 + private SSL: $3.75/mo. + unique IP: $2.50/mo.)
Bandwidth and disk space: unlimited
Phone support: 24/7/365
Hosting Plan Comparison
HostGator is a popular budget hosting company in Texas that’s been around since 2002. They offer several very low-cost hosting plans, including the “Hatchling” plan beginning at $3.96/mo. and the “Baby” plan for $6.36/mo.
Minimum for secure hosting: $3.96/mo. (with shared SSL)
Business Plan (includes unique IP + private SSL): $10.36/mo.
Bandwidth and disk space: unlimited
Phone support: 24/7/365
Hosting Plan Comparison
Lunarpages, although it seems more geared to business-level hosting, does offer a “basic” low-cost hosting package, but no shared SSL.
Minimum for secure hosting: $18.15/mo. (hosting: $4.95/mo. + private SSL: $8.25/mo. + unique IP: $4.95/mo.)
Bandwidth and disk space: unlimited
Phone support: Mon-Fri 7am-7pm PST; Sat-Sun 7am-3:30pm PST
Email support: 24/7/365
Hosting Plan Comparison
InMotion Hosting is another popular hosting company that offers the full range of hosting services, including budget packages.
Minimum for secure hosting: $5.95/mo. (with shared SSL)
Bandwidth and disk space: unlimited
Phone support: 24/7/365
Hosting Plan Comparison
Although GoDaddy states that its primary business is domain registration, they have also become a popular hosting company, offering the full range of hosting options. Although I tend to like hosting companies whose primary business is hosting, GoDaddy seems to have a pretty good reputation. However, they do not offer a shared SSL plan.
Minimum for secure hosting: $14.99/mo. (unique IP + private SSL)
Bandwidth: unlimited
Disk space: 150GB
Phone support: 24/7/365
Plan Comparison
HostMonster, located in Utah, has been around since 1996. It appears that HostMonster and BlueHost are owned by same entity, although their prices and offerings differ. Like BlueHost, HostMonster offers shared SSL but has the 100KB file size limitation, which may be a non-starter for those considering this company. They offer just one hosting plan, with optional upgrades and add-ons.
Minimum for secure hosting: $5.95/mo. (with shared SSL)
Minimum for private SSL: $12.20/mo. (unique IP: + $2.50/mo. + private SSL: $3.75/mo.)
Bandwidth and disk space: unlimited
Hosting Features
What to Consider When Selecting a Hosting Company
When choosing a hosting company, the devil’s in the details. Here are some things you should consider:
How many domains can be hosted under the account? This can range from one to unlimited
Does the hosting include free domain registration? Many hosting companies are also registrars and offer a free domain registration when you sign up
Does the hosting company offer 24/7/365 phone support? Most, if not all, will offer 24/7/365 email support, but I’m much more comfortable if I can get someone on the phone when my site goes down
What are the restrictions on bandwidth and disk space? These days, many plans offer unlimited bandwidth and disk space, or at least very large limits
How do different plans compare? For each host, go to their plan comparison page and study it carefully
Web host review sites: There are many from which to choose. Web Hosting Geeks is a good one, but there are many others
According to Facebook’s Cat Lee, ”The content will not be accessible for users with secure browsing turned on. There will be a page that states something close to: This app does not support secure browsing.”
To help page admins locate a budget-friendly and secure hosting solution for their page tabs, I did some digging and located some great hosting companies offering low-cost secure hosting solutions.
There are certainly others, and I have provided some guidelines for making the right hosting choice. I have also laid out some of the basics of hosting and security certificates.
Facebook and Secure Browsing (HTTPS)
In February, Facebook introduced the “Secure Browsing (HTTPS)” option. Since then, when browsing under HTTPS, any page tab content not hosted securely displays a popup with a warning that the page is not secure. Users have to click on the popup before viewing the tab content.
Page tab creators had the option of providing a “Secure Page URL” to display to HTTPS users. As of October 1, a secure URL is mandatory, and page tabs not hosted securely will no longer be displayed to users browsing under HTTPS.
What Is Secure Browsing (HTTPS) and How Do I Get It?
When a web page is hosted on a server enabled with the SSL (Secure Socket Layer) protocol via a security certificate, content sent between a user’s browser and the server hosting the secure web page is encrypted, and no one can intercept confidential information such as credit card numbers, Social Security numbers or any other information you type into your browser.
All web hosting companies offer security certificates in most of their hosting plans, either a shared SLL certificate, where all sites on a single shared server are sharing a certificate, or a private SSL certificate, available to websites with a unique IP (web address). For Facebook page admins, the shared SSL is a low-cost and workable choice.
Shared SSL Versus Private SSL
If all you need is an affordable option for hosting your page tab’s “index” page (the iFramed page you host yourself), you can consider plans that offer shared SSL on a shared server, which is the cheapest option. Although not a good choice for an e-commerce site, shared SSL is fine for meeting Facebook’s requirement for a securely hosted page. Beware file size restrictions on shared SSL!
In researching this article, I did notice that BlueHost and HostMonster (both owned by the same parent entity) put a file size restriction of 100KB for each embedded file on your page (images, audio, video, etc.) which would be far too restrictive for most iFrame page tabs. But I didn’t see this shared SSL restriction anywhere else.
Some Popular Web Hosts That Offer Low-cost Secure Hosting
The following hosting companies all offer low-cost hosting, and most include a shared SSL option. I did some informal polling on the HyperArts fan page and the following companies stood out.
Note: “Bandwidth” is the total amount of data transferred from the server each month and this number increases as your website is accessed more often; “disk space” is the total amount of storage space that is provided for the files associated with your site, including log files and MySQL databases (but not email).
DreamHost has been around for years and is generally well-regarded. However, DreamHost doesn’t offer shared SSL, and their phone support, which costs extra, is minimal.
Minimum for secure hosting: $14.15/mo. (hosting: $8.95/mo. + private SSL: $1.25/mo. + unique IP: $3.95/mo.)
Bandwidth and disk space: unlimited
Support: 24/7/365 email support (response within 24 hours), premium support (3 phone callbacks/mo. + unlimited live chat) add $9.95/mo.
Hosting Plan Comparison
BlueHost offers a full array of budget hosting options. Although they offer shared SSL, there is a file size limit on each page of 100KB per included file, and BlueHost warns that “any embedded data (images, audio clips, etc.) larger than 100KB will be truncated.” So this limitation may not work for you.
Minimum for secure hosting: $5.95/mo. (with shared SSL)
Minimum for private SSL: $12.20/mo. (hosting: $5.95 + private SSL: $3.75/mo. + unique IP: $2.50/mo.)
Bandwidth and disk space: unlimited
Phone support: 24/7/365
Hosting Plan Comparison
HostGator is a popular budget hosting company in Texas that’s been around since 2002. They offer several very low-cost hosting plans, including the “Hatchling” plan beginning at $3.96/mo. and the “Baby” plan for $6.36/mo.
Minimum for secure hosting: $3.96/mo. (with shared SSL)
Business Plan (includes unique IP + private SSL): $10.36/mo.
Bandwidth and disk space: unlimited
Phone support: 24/7/365
Hosting Plan Comparison
Lunarpages, although it seems more geared to business-level hosting, does offer a “basic” low-cost hosting package, but no shared SSL.
Minimum for secure hosting: $18.15/mo. (hosting: $4.95/mo. + private SSL: $8.25/mo. + unique IP: $4.95/mo.)
Bandwidth and disk space: unlimited
Phone support: Mon-Fri 7am-7pm PST; Sat-Sun 7am-3:30pm PST
Email support: 24/7/365
Hosting Plan Comparison
InMotion Hosting is another popular hosting company that offers the full range of hosting services, including budget packages.
Minimum for secure hosting: $5.95/mo. (with shared SSL)
Bandwidth and disk space: unlimited
Phone support: 24/7/365
Hosting Plan Comparison
Although GoDaddy states that its primary business is domain registration, they have also become a popular hosting company, offering the full range of hosting options. Although I tend to like hosting companies whose primary business is hosting, GoDaddy seems to have a pretty good reputation. However, they do not offer a shared SSL plan.
Minimum for secure hosting: $14.99/mo. (unique IP + private SSL)
Bandwidth: unlimited
Disk space: 150GB
Phone support: 24/7/365
Plan Comparison
HostMonster, located in Utah, has been around since 1996. It appears that HostMonster and BlueHost are owned by same entity, although their prices and offerings differ. Like BlueHost, HostMonster offers shared SSL but has the 100KB file size limitation, which may be a non-starter for those considering this company. They offer just one hosting plan, with optional upgrades and add-ons.
Minimum for secure hosting: $5.95/mo. (with shared SSL)
Minimum for private SSL: $12.20/mo. (unique IP: + $2.50/mo. + private SSL: $3.75/mo.)
Bandwidth and disk space: unlimited
Hosting Features
What to Consider When Selecting a Hosting Company
When choosing a hosting company, the devil’s in the details. Here are some things you should consider:
How many domains can be hosted under the account? This can range from one to unlimited
Does the hosting include free domain registration? Many hosting companies are also registrars and offer a free domain registration when you sign up
Does the hosting company offer 24/7/365 phone support? Most, if not all, will offer 24/7/365 email support, but I’m much more comfortable if I can get someone on the phone when my site goes down
What are the restrictions on bandwidth and disk space? These days, many plans offer unlimited bandwidth and disk space, or at least very large limits
How do different plans compare? For each host, go to their plan comparison page and study it carefully
Web host review sites: There are many from which to choose. Web Hosting Geeks is a good one, but there are many others
1 comments:
Or You can use Fast Fan Pages that already are hosted with the required SSL Certificate/s.
http://bit.ly/fbffp
"By the way, unlike MOST other Fan Page services, Fast Fan Pages provides the secure connections that allow users to view your pages over an https connection ...
In simple terms, so long as your content is hosted with us, that means your customers will never be met with this unprofessional error message because we take care of the costs of the security certificate for you and we manage the technical aspects for you" ...
Trev
http://bit.ly/fbffp
Post a Comment