pay with paypal, do I need ssl certificate

Question

if I have a Pay with Paypal button on one of the pages of my website that sends the users to Paypal to process with payments, is it necessary to get an SSL certificate for my website? In other words, should the page on which the pay with Paypal button is be served over https?

Thank you

Answer 1

Nope, if all of your sensitive information is going through paypal only.

if you save any sensitive information in your site (email / username / passwords) - then of course you must have certificate, because someone may steal the information.

but if paypal is doing all the work. you're good.

https://www.jvfconsulting.com/blog/is-an-ssl-cert-needed-for-paypal-transactions/

Answer 2

As I understand, Pay with PayPal goes to their site and saves no sensitive information on yours, so a cert should be unnecessary. However, if you're going to save any sensitive information yourself, you would be well served to do so over https.

Answer 3

Http sites are sent unencrypted and so can be interfered with and changed.

So it depends: Do you mind a hacker intercepting your plaintext http page and replacing that "Pay with PayPal" link to a different link that goes to paypa1.com or some such phishing site and they get the money instead of you?

If that's not something you want then go with https on your site as well.